Malicious code in @sonahri51/orientation-change-end (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e5ffc2c48c12f6b36620be282c6ed94826d434430e8412d70a220d4719b366 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-metricsdrilldown-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76f0bf52430819b26f7b4042daedcdd27b0b6dcc7278385dac6989be16b987de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in formio-tenant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c6b64a8b6a6d607401323c18ac8fb343218bcc9a2484cf780dcd896b39d438b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1811 Malicious code in formio-tenant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c6b64a8b6a6d607401323c18ac8fb343218bcc9a2484cf780dcd896b39d438b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @f2p-mml-frontends/mml-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ede0cf36fe3863ea31a447c95853a9a95a8b926d51476470fdcbc2bedfeb2b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wefweg32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76caa25fdf514fc948cac0ea90e6ea22c814d04b780776b48478a94c0141230c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tg-shell-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 183483dd192b9daec2a5d81eda2a6c1b448091a4cfe626150636d2f1be19fd7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2056 Malicious code in twitter-sc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0b3d9d25d03f278d57c1a000d070c3a5846334136498ba3ade4b4b94db1e14c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in common-typeface-termina (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 193842681a528ea3a616187f7dff355372eea1f8144257cc73c7d73d9b859318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in minipay-minidapps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3aa1c34b617bec50d4bb5c5309a8e373ba9a96136b48f20077d41dff0205010 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in animated_vector_annotations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3b53362867f99721ff884fb86d3d8f5ccc5bcb1d9abb33b7b67f8fd7fe4408c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bindbc-lua (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c99a42c2ca94208dcdd6dd74e22b5b79b9b211d2afd1854339f31be90d6cd75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in accept-a-payment-playwright-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a7c8fcfc301cd02159a59241fc90d212ace8d247570cbdd7b66adffd6579d05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1776 Malicious code in consumer-platform-global-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673a0b607ba1bc6ba23ef4cb90ce7b66e03db02b377733960c524cf6757b4c61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in snap-design-system-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bad4c0b89835a8fe7ca332902590a3ace5d2889d12e2d3cde10ee5dc5c695d54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7294-4)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7294-4 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Malicious code in reproduction-hardhat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ff49260182fa6026d9c786cbe4327341440dc9cea5e33c43d1687ed1effe699 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metrics-aggregator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cd896083dc19fbe781ed9f414bc1a72581378e63717086f459e1b03fd0c058c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ad-creative-preview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4976ed17af1930b3c8e965b09664d5243a6cfe6bfa46e841964001beb48fb316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Advisory ROSA-SA-2025-2729

Software: opensc 0.20.0 OS: ROSA Virtualization 3.0 packageevrstring: opensc-0.20.0-8.rv30 CVE-ID: CVE-2023-2977 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A vulnerability in OpenSC causes a buffer overflow in the pkcs15 cardoshaveverifyrcpackage function, allowing an attacker to cause a processing...