MAL-2025-1403 Malicious code in coinstore-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 553286be2ea7bb7f27b08ebdb284151c0bfe872a19d1b99a0714ad486160b6c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1454 Malicious code in yizhifabao60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32fa0d2dfcf257bafeb5a31945cec97ee3b47588cb115fe2f8dc52e8df6f4374 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yizhifabao60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32fa0d2dfcf257bafeb5a31945cec97ee3b47588cb115fe2f8dc52e8df6f4374 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1456 Malicious code in yizhifabao62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d18ca6a3b99770e3e610f9e0ec72712c2d9f11bd1c552699dcb95fbf4169f17e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1449 Malicious code in yizhifabao55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 185d2f62a8857d3e7f999d149e1c3f6ff67133772af665b6d9a44d56e5b82eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in telegram-bot-hoster3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a657b92399440588fd143dbe4c319d27882350d825a29877b96676add635391e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in telegram-bot-host (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bfce13be8a817c4f8165b600702f49df73736a44741857d560aab26bfa00162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in telegram-bot-hoster2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0cd2b5b45da2e84d95f63a130c4c69abcf83af2365c6a45ab3a60b6a61fc41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1442 Malicious code in telegram-bot-hoster2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0cd2b5b45da2e84d95f63a130c4c69abcf83af2365c6a45ab3a60b6a61fc41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in electron-dependency-confusion-window (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db478dbbcf0f5373a70e3193cc1c658b4438bdcd02a3f432b141e442e7bbbda7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-22962

A critical remote code execution RCE vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters when debugging mode is enabled. An attacker with a valid session ID sessid can send specially crafted POST requests to the /json endpoint, enabling arbitrary...

CVE-2025-22962

A critical remote code execution RCE vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters when debugging mode is enabled. An attacker with a valid session ID sessid can send specially crafted POST requests to the /json endpoint, enabling arbitrary...

Malicious code in gestalt-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edc35868180fe5879113537fbdce9118cb06ace84a31d55fa9268d5bc050091e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1361 Malicious code in fontsource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75a000a9d03b24e4668d3039226081176ee3e9d6488d0bfb2fc7dfceb1b05e63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prettyphoto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6977060dff1dfc717c3b009910fb56287bb8073952c6a1ac7f3dff6afcd6065 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1359 Malicious code in assisted-chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13d61cf3fd29a340ba0644006a1644be59bc8a39769b41c2586665e3c21120ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1366 Malicious code in holahackerone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c18612fa91dc861c71f725e798c3acc7560a3f7735d2ec1291c3d90eec1f487f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-web3.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae0ba85746959ae8f7ae3dc7a934de9e4cb299669dbb270322fa2d8871fd8326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tenable-universal-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a06fb3037f4c830e070f05524b0e4d6e3cb5adec2e77bc06f20ee92a42742689 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openbet-player-api-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11f880dc4e1451453507ea3db6a2cf42a292a1e81dfd3df5bed7a77d00bb84a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...