MAL-2025-22361 Malicious code in heliosphere-wormhole-mqqr (npm)

The package heliosphere-wormhole-mqqr was found to contain malicious code...

MAL-2025-29256 Malicious code in pine-wormhole-v6m0 (npm)

The package pine-wormhole-v6m0 was found to contain malicious code...

MAL-2025-39464 Malicious code in wormhole-galaxy-parcel-ultra (npm)

The package wormhole-galaxy-parcel-ultra was found to contain malicious code...

MAL-2025-39465 Malicious code in wormhole-steganography-prettier-eclipse (npm)

The package wormhole-steganography-prettier-eclipse was found to contain malicious code...

MAL-2025-31958 Malicious code in redwood-wormhole-kqxq (npm)

The package redwood-wormhole-kqxq was found to contain malicious code...

MAL-2025-17897 Malicious code in cypress-pm2-wormhole-quark (npm)

The package cypress-pm2-wormhole-quark was found to contain malicious code...

MAL-2025-37095 Malicious code in tornado-wormhole-qrcx (npm)

The package tornado-wormhole-qrcx was found to contain malicious code...

MAL-2025-39466 Malicious code in wormhole-superflare-quasar-antares (npm)

The package wormhole-superflare-quasar-antares was found to contain malicious code...

MAL-2025-37569 Malicious code in ugli-wormhole-0hyh (npm)

The package ugli-wormhole-0hyh was found to contain malicious code...

CVE-2025-4558

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...

CVE-2025-4558

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...

CVE-2025-4558 WormHole Tech GPM - Unverified Password Change

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...

CVE-2025-4558

CVE-2025-4558 affects WormHole Tech GPM (GPM from WormHole Tech). The vulnerability is an Unverified Password Change that allows unauthenticated remote attackers to change any user’s password and then use the modified password to log in. Publicly documented details in connected sources indicate a...

CVE-2025-4558

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...

CVE-2025-4558 WormHole Tech GPM - Unverified Password Change

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...

WormHole Tech GPM 安全漏洞

WormHole Tech GPM is an enterprise-grade project portfolio management platform that integrates Agile development and DevOps toolchain from China-based WormHole Tech. A security vulnerability exists in WormHole Tech GPM that stems from unauthenticated password changes, which could lead to an...

PT-2025-20680 · Wormhole Tech · Wormhole Tech Gpm

Name of the Vulnerable Software and Affected Versions: WormHole Tech GPM versions prior to 202502 Description: The issue allows unauthenticated remote attackers to change any user's password and use the modified password to log into the system. This is due to an Unverified Password Change...

Malicious code in wormhole-liquidity-layer-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6c87b98a81372effafd468239452822bc6241e0fc0f86c4fcbd870b47ee0b19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wormhole-messenger-solana (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3533c227d2e503f88e2ae202b9433a6a7a89000b952c2875242b1834dbd32089 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3205 Malicious code in wormhole-messenger-solana (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3533c227d2e503f88e2ae202b9433a6a7a89000b952c2875242b1834dbd32089 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...