Malicious code in phonepe-payment-capacitor-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c02a4bb7c5999768baf3318427f8aaffad151f7838f8bfdfee9ad952a24db492 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rif-token-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05165c539111a84ce983abfe2dbe4cadf7b601ad72a0676be43e8c101e5fc752 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in invoicetemplate-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0040946fd67ce8ddd6e93a9a31d2bdfc1ba57b40874f62c2b033f3d2be5a5888 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3127 Malicious code in windowsreveal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45eb7752fa24f9edaffa6707ee8ec4e0b1684a637d4d1cc1f6a003d040039332 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3100 Malicious code in hide-console-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 553d9f1d98ecb2b448f09091adba1ab0cdce9e4f07391a50fc002ba74669645a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Microsoft Edge 资源管理错误漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A remote code execution vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by an attacker to execute arbitrary code on a system...

CVE-2025-31161

CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account unless a DMZ proxy instance is used, as exploited in the wild in March and April 2025, aka "Unauthenticated HTTPS port access." A race condition exists in the AWS4-HMAC compatible wi...

Ubuntu: Security Advisory (USN-7408-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7407-1: Linux kernel (HWE) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - Supe...

CVE-2025-2071

A critical OS Command Injection vulnerability has been identified in the FAST LTA Silent Brick WebUI, allowing remote attackers to execute arbitrary operating system commands via specially crafted input. This vulnerability arises due to improper handling of untrusted input, which is passed direct...

Malicious code in @hongfangze/date (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af9a7da990aebfe4a65e85f282dd6d67bee3d187fde86c3610aae9ebf14bc3bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hongfangze/array (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f960dc6274e7bc128da9e089382bd14d47a6e944b250dbc6a53b2f4a17cce5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3034 Malicious code in @hongfangze/calc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62ce8da37d7e1e8677cceb4a5db36f031470df22a7996162be8d54154076796a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hongfangze/office (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25f57ae31d0133a71e4274c381dcefb8e00468c17cd0a7df89a9a4bbae15baa4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hongfangze/email (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d003c3bc820422c79a6708a76107d9828e3df78ada0a45bd3c6732eba57c888b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3040 Malicious code in @hongfangze/date (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af9a7da990aebfe4a65e85f282dd6d67bee3d187fde86c3610aae9ebf14bc3bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ehackify-workshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6b886d5c20d3c03f44c4900a8073d17e4871883be89a22c897197d0a5baecb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3065 Malicious code in ehackify-example-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60ffba72c4fb6005e35ffd9acb8fde18eaa73f3c647a76de85a153ed9b5f0a89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @atulrv1day/unusedpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77df872b6f487ff391d16643aa0a160f89d08f54054931319a0bdb4bc172aaf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3069 Malicious code in keybase-live-feed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e37d8ed67c047350e5767575fe330037e3df4a1d2bc9a1159801b02c54a375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...