MAL-2025-3761 Malicious code in dforce-staking-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51b7aa18ddef6a3d8adeb5b58454b0054055db56c5d22718d55544b309b8bc0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frame-minter-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edbfd183462b159a20b8cfbbf493357ec40a76dc283c070eb9a9dfb8e4f172fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coinpayments-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03cd3ad7581d9fc90c9a03479a13f8edcb80a999a15a2d7c2dcfc0a30b6b6ac5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3777 Malicious code in zksync-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0af13565b82b48cb80a58f21db293bbef9f5ef83e1c4fdcf67534110215bab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3764 Malicious code in ghosts3c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4043c1bd543dfe1287c1dd1d9b016beb0acfc6d126754bd599179713d3e36966 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ghosts3c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4043c1bd543dfe1287c1dd1d9b016beb0acfc6d126754bd599179713d3e36966 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3822 Malicious code in conversation-extension-reservation (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad7a16b6e0fa02ae0a1ef8dca56998a19255781b3db06d6b7616a0392acc0d11 Any computer that has this package installed or running should be considered...

Malicious code in gear-idea-indexer-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e4383fa116dab4a076fef8694ef177acb72f5e46038222fdc48e6339dc84a6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nitro2/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 140caf464a34fc34d7fea71e7561ee5849558b1ee1c7987c9a38c265eb22e4f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.formats.fbx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 583302188f1d3c02ddb7580ef4df38be05d5acfe23e795966baa799cda4efa8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29020683719ce2888e35bc68573af9acf12bfa039f451c61178d38ae8210386d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.platforms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 161c7b1f35e6c192a0f74cd71cf87b2b6436cc4528a32757f6901c2ce6ff7c07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu: Security Advisory (USN-7494-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NETGEAR RAX50 Command Injection Vulnerability

The NETGEAR RAX5 is a wireless router from NETGEAR. A command injection vulnerability exists in the NETGEAR RAX50. The vulnerability stems from improper handling of the ifname parameter in the apclidoenrpinwps function, which can be exploited by an attacker to launch an attack and cause the syste...

Ubuntu: Security Advisory (USN-7489-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in gx-npm-messenger-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26007d847aa029d08defbaa44538b81f13b13adfd8edb4c7ea3fc335a439e0f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7496-5: Linux kernel (Azure FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Block layer subsystem; - Character device driver; - Hardware crypto device drivers; - GPU drivers; - Media drivers;...

USN-7496-3: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Block layer subsystem; - Character device driver; - Hardware crypto device drivers; - GPU drivers; - Media drivers;...

Malicious code in ias-dashboard-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c5e715ecf1204e540d58dcb1f94d07ca5724d7a1a0df89b355dbe88545c5185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ai-document-translation/ui-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8c94ea05205ad6ac8c809be2fa22e18fae368f27f1f8bd34048528dc25daa90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...