MAL-2025-1179 Malicious code in tinyquickstartreactnative (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2ffe206600babcdd429e51d21c0d9e150d1542aef0b6eef05cd70294e35da1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sendinblue2019 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fea3b26c71619ef68e89535bb38484e7a23d967e7ec4c6b044b9e29d3a65ed6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ROS-20250203-05

Vulnerability of vim text editor is related to buffer overflow in the heap, when switching to other buffers using the :all command. Exploitation of the vulnerability could allow an attacker to execute arbitrary code The vim text editor vulnerability is related to bounds errors when processing...

Ubuntu 16.04 LTS : Linux kernel (Azure) vulnerabilities (USN-7233-3)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7233-3 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Malicious code in victory-native-xl-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9101dd18b0880eb5358d74e5a997f3a532b49825b6a4cb47d96778143a48b4a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in isctf2 (npm)

The package opens up arbitrary backdoor port that allows bad actors to connect to. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539f5cd801a6661acb135e95f2a3d7e10131795d17c2395ae0b3b804a3263b7d Any computer that has this package installed or running should be...

Malicious code in vite-paypal (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 667d1b093499f31a7533aa131e6a6a7833a64bf1100de5a7b1369f07b30ac93b Any computer that has this package installed or running should be considered...

Malicious code in checkmkwebapiclient (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80e93ca8bc4d8e693d92b36f85b474da9e452eb96ba70f5229f6d1f0fe14d645 Any computer that has this package installed or running should be considered...

Malicious code in momnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db49a6a7ccd97fb305c1f35bd000db30977e139b1b9007a4e71975ee27b7b85d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-720 Malicious code in momnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db49a6a7ccd97fb305c1f35bd000db30977e139b1b9007a4e71975ee27b7b85d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-super-prosemirror (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 258b229e7fc629055a74b829ee28b761e137f5d9ad4345ebec8702b651baf88e Any computer that has this package installed or running should be considered...

Malicious code in media_kit_native_event_loop (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d4f7b68836068f9cc96c2c5db66c0ad1cbc255e21f525e5069885d7aff5e5f Any computer that has this package installed or running should be considered...

Malicious code in node_package_runner (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2184b9f02eafe0c7718354523c5e27d58e20d2680516093b39bea75dc2795e98 Any computer that has this package installed or running should be considered...

Malicious code in check-release-dependencies (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9bdeafded5c255c77e197893504e55d7f76cbc76632b83f3b04925c6c6aa970 Any computer that has this package installed or running should be considered...

Malicious code in move-binary-format-wasm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6e47d2604861aead1b88adc5debb15c733e9012421604524480bc754379a50a Any computer that has this package installed or running should be considered...

Malicious code in pegin-address-verificator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae7230bdf02eee4e5265bcb3025f902011c2de5045bbd1859e4e2d2f655d1e3b Any computer that has this package installed or running should be considered...

Malicious code in backpack-foundations (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4bba8fcd3cb3b4c99abd7a1cff3ddb0e0c15a179005fbed75b0441572a2dad1 Any computer that has this package installed or running should be considered...

Malicious code in flashcards-sdk-converter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eddf0b4ef4ccf55d3d894db73987fea2f721ef254833426d112e52eb62005bd Any computer that has this package installed or running should be considered...

Malicious code in old-celo-base (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d16d8623e169f195cbb3deeebd0e37b8e6ddd13cfdd5a9b2ece072f3e0170a1b Any computer that has this package installed or running should be considered...

Malicious code in node-telegram-bot-sdk (npm)

This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eac040b96e06268d2909a10c620df0339df7c2f6cef468c8c0e3cca3ce347c8f Any computer that has this package installed or...