Malicious code in nf-cl-logger-logger-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b104f3015e44fa4a28987e5ce9d85268531ad6cee0a7b2d366c75a78279ccdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gs_isotope-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc9cf2e5331d05d054643fdf750024a8608fd9527d09ee3b9f0ce18a0a424064 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in k00h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8611181e62dbbb17a96abd393d71602a8ab52b9197629fe1d8724413c128de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5225 Malicious code in feature-repeaters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 249612b727817f789e9e197fbfadefd3794ff07913ea34260a3ae17c9e2f1739 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nf-cl-logger-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f9af3e16698ffb1e46af4d45f8b046c0ac49c6e277db7b769a831468aa92894 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jridgewell-resolve-uri-latest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ebc214d374220844dddff1ed8dc339282cd98387925c0d108222a3dc578d430 Any computer that has this package installed or running should be considered...

QNAP File Station 5 Trust Management Issues Vulnerability

QNAP File Station 5 is a file management system launched by Weilian Technology, which is mainly used for file management of NAS devices. A trust management issue vulnerability exists in QNAP File Station 5, which stems from improper certificate validation, and can be exploited by an attacker to...

QNAP File Station 5 Trust Management Issues Vulnerability (CNVD-2025-15402)

QNAP File Station 5 is a file management system launched by Weilian Technology, which is mainly used for file management of NAS devices. A trust management issue vulnerability exists in QNAP File Station 5, which stems from improper certificate validation, and can be exploited by an attacker to...

Malicious code in postcss-layout-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 462502060afb8b130fe73ec2cf8940f9cc7e7d86e3a70ad48606a6b1b4484231 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5209 Malicious code in vite-auditlog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f572293aa98c3908f745c0548edfb1b2fff98c0f4df1f5e4ba96ec83743d5ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5196 Malicious code in my_module_luckywater (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 877fa1cdddcd418b3581e3b6b1675085dbedcafe73f4d1162832ba3f5038985d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonwepjoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2597a5128b2b0328c056ce8b33af7f29686d36f80c3e90742da9645ae8d57351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5195 Malicious code in jsonwepjoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2597a5128b2b0328c056ce8b33af7f29686d36f80c3e90742da9645ae8d57351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @com.att.dtventertainment/dfw-pm-yo-space-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 806161588999d1c3f730dfe7672f8123c0cd3b6e2b28c00a6463f91ced635766 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thunderbolt-features-loaders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee3eda7524a24da1ec85916ab8b93146e2e1399af30190b04b9021b0edbf7d61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5194 Malicious code in fwc-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5660699712881dfe7a83949c97116e726a98d13a948aa245b1b0aebaab71632 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rulai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23e395619a0bca0da893334e671820e1cbb6a2cb16eac6d86adc44b7aec33181 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5207 Malicious code in somm-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f97c75802e77b1441a736bc934596858cb37f76df15372e07fd3ee7fbc2a5ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-7585-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7585-1 advisory. It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when...

PT-2025-26455

Name of the Vulnerable Software and Affected Versions: Aquatronica Controller System firmware versions = 5.1.6 Aquatronica Controller System web interface versions = 2.0 Description: An information disclosure issue exists, allowing remote attackers to issue crafted POST requests to the "tcp.php"...