Malicious code in requireform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99f289c40aca4d37d6a0e570ffff5b68ab746b09a266718bf794bb3fcda61b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2188 Malicious code in requireform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99f289c40aca4d37d6a0e570ffff5b68ab746b09a266718bf794bb3fcda61b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7323-1: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

Malicious code in async-query-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c182fcd486203b0e1bcf7d1677e5b65105252c5d88f343b159e8dec92e0c772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2190 Malicious code in safe-events-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c5f0543a7347a07a6c8e5268d63a80e4043f47d8b45500c6c585b72d093b118 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2181 Malicious code in makerspace-cpx-intro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f001e9f23b801fb8c275858b50785d657d092aac3e06e694490e7e4b5dd0ae1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2164 Malicious code in api-discord.js-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7ee9add0a4330d935c9898bf52c0fb410166bbda7287b5e162e139afd045bf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2163 Malicious code in alexpavlov--jquery-suggestable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f4773aee85f3d282a89ee413b5af4e93365981f67b821882709daf1d3cc6eac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2160 Malicious code in aave-v3-crosschain-listing-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc82a469f0ebdecfc878d4d0c203c13c75ab71140d7cf9f128ae1cfb8c3bc47f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7322-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Block layer subsystem; - Networking core; CVE-2024-56672, CVE-2024-56658...

Malicious code in sdxcode1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e86442bd4bd6e2d95d5da4c3cf82c1961b38b57f4e51b8654d2d3398990dece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 24.04 LTS / 24.10 : Linux kernel vulnerabilities (USN-7323-1)

The remote Ubuntu 24.04 LTS / 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7323-1 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could us...

Malicious code in amis-widget77777 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d942d0ef0acfd81130cbd80a7296143bb7e3fd2bd08430bdaeefddea85c72c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-custom-widget-template1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21b54ec1679cbeb92bfd2aaa272446918c32899d07a1fc5e4211c07323790f26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in amis-test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 907fed13cac56efe0df742c4ebb89e8e62fd4df5e4d284ebc7dd48a848a0647d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2087 Malicious code in amis-test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 907fed13cac56efe0df742c4ebb89e8e62fd4df5e4d284ebc7dd48a848a0647d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-ui-component-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dccf55adacf1d8f07bd95ddca3f474ac9b53ffa48455ff2cbb23352bd0055add Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2082 Malicious code in @siemens-ag/twodc-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caed869480a5b1f4b83514a80fe6c2c3d77bec3511596c689111f920661d0be8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2091 Malicious code in angular-identity-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54c4b1fd6456e049589f15a4f03fe3fdb5370f3e9d0d66e8664835e3c7cb5f0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2080 Malicious code in @roku-web-ui/legacy-nav-page-standard-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0fda134ffeb40092f3455e93def754a1f268e9e072daf6c275e9c40b35b1917 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...