Malicious code in biconomy-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7692c3d9c9dbc78359b722789ba568b39a3e9b29761ba732738a992fc85c77fe Any computer that has this package install...

Malicious code in ascendex (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64d9f1499d1323b67646cc4ba8951e9666b5fc93a0878ca5129b661bd7060c92 Any computer that has this package install...

Malicious code in deepcoin-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00eb83eff2eeb19ff872da9610ae40247140536ea979ba39b846c577ab024631 Any computer that has this package install...

Malicious code in bitflyer-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 383c2afaf3673c3bf9d9c169466342bc62fc54e5780e3248c1a28b85c161b744 Any computer that has this package install...

Malicious code in bitflyer-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92823aff4557314ac33ae517e80618531108f8df36c4abf480745cbdf92462a8 Any computer that has this package install...

Malicious code in gemini-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c09b00286a4703399abe639fd63b221927636bff2eaa714fce91ae4f8c05451c Any computer that has this package install...

Malicious code in gemini-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcb67009761d760d10c90b8b5ad828df5d94924a1595158c9007254e4b755d60 Any computer that has this package install...

Malicious code in bitmart-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ca51f117bee2cff1b712ba689ce844c19ec597faf4268714f41fb013e464c6e Any computer that has this package install...

Malicious code in bitmart-production (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 842ce630d8da013a9dc026874f9a06a43f0766c346738826831fd3f79ba27f5e Any computer that has this package install...

Malicious code in gate-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb8bd0117fe213aa8ad75b4f6632c8add2de55baafd8150147bd9958ffc157ae Any computer that has this package install...

Malicious code in gate-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ee3dfdcc84d19985325184c8a476958e1ce412b73f69f004d0041aa84910747 Any computer that has this package install...

Malicious code in gate-production (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e5829c327248d41abf070c9c23598e436a2fefc55efc2986ff6ca1ba771ef61 Any computer that has this package install...

Malicious code in bitfinex-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 547671d00c8ab0f008f2d79e1722fff17fcf8abe2751e126d426249a9f62eb0e Any computer that has this package install...

Malicious code in bitfinex-production (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3b422cc62c2a37ce694ef5b18ec87c83c4458f5841c731f826b11c19f575bf6 Any computer that has this package install...

Malicious code in mexc-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aab447e6786fd38bfbfa97d8806d9059980107ba328bfce7738f23b885923b02 Any computer that has this package install...

Malicious code in kucoin-production (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff7abb8b4fceb09af6648acb617fd1e6d2af1e967b19bd929df5b262faab7808 Any computer that has this package install...

CVE-2025-22961

A critical information disclosure vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters due to Incorrect Access Control CWE-284. Unauthenticated attackers can directly access sensitive database backup files snapshotusers.db via publicly exposed URLs...

CVE-2025-22962

A critical remote code execution RCE vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters when debugging mode is enabled. An attacker with a valid session ID sessid can send specially crafted POST requests to the /json endpoint, enabling arbitrary...

CVE-2025-22961

A critical information disclosure vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters due to Incorrect Access Control CWE-284. Unauthenticated attackers can directly access sensitive database backup files snapshotusers.db via publicly exposed URLs...

CVE-2025-22962

A critical remote code execution RCE vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters when debugging mode is enabled. An attacker with a valid session ID sessid can send specially crafted POST requests to the /json endpoint, enabling arbitrary...