CVE Vulnerability Advisory Database

[Affected Scope] Nx Console extension version 18.95.0 distributed via VS Code Marketplace and OpenVSX

[Impact] Execution of arbitrary malicious code within the developer's local environment, potentially leading to credential theft and full system compromise

[Mitigation] Immediately uninstall the compromised version 18.95.0 and upgrade to the clean version 18.100.0 or higher

[Affected Scope] DAEMON Tools Lite Windows versions 12.5.0.2421 through 12.5.0.2434 distributed between April 8, 2026, and May 5, 2026

[Impact] Attackers compromised the vendor's infrastructure to distribute trojanized binaries signed with a legitimate certificate, bypassing security controls to establish backdoor access

[Mitigation] Immediately uninstall the compromised versions, perform a full system malware scan, and reinstall the clean, patched version from the official vendor

[Affected Scope] 84 malicious versions across 42 @tanstack/* packages published between 19:20 and 19:26 UTC on 2026-05-11

[Impact] Attackers successfully published credential-stealing malware under trusted identities by hijacking legitimate OIDC tokens

[Mitigation] Immediately audit dependency trees, purge affected package versions, and rotate all potentially exposed credentials

[Affected Scope] Trivy Go/Container image v0.69.4, trivy-action v0.0.1 to v0.34.2 (76 tags), setup-trivy v0.2.0 to v0.2.6

[Impact] A threat actor used compromised credentials to force-push malicious commits to version tags, enabling credential exfiltration from CI/CD pipelines

[Mitigation] Upgrade to safe versions (Trivy v0.69.2/v0.69.3, trivy-action v0.35.0, setup-trivy v0.2.6 recreated) and pin actions to immutable commit SHAs

[Affected Scope] Specific versions of the ASUS Live Update client distributed prior to its End-of-Support (EOS) in October 2021

[Impact] Unauthorized modifications introduced via a supply chain compromise allow remote code execution and unintended malicious actions on targeted devices

[Mitigation] Since the product is End-of-Support, immediately uninstall the software and block update server communications at the network level

[Affected Scope] Windows development and build environments utilizing eslint-config-prettier package versions 8.10.1, 9.1.1, 10.1.6, and 10.1.7

[Impact] Installation of the compromised package triggers automatic execution of install.js, dropping and executing the node-gyp.dll malware to compromise the host system

[Mitigation] Immediately uninstall the compromised versions, force-downgrade or upgrade to a clean version, and scan systems for malicious DLL files

[Affected Scope] Workflows executing reviewdog/action-setup@v1 and dependent actions between March 11, 2025, 18:42 and 20:31 UTC

[Impact] Malicious code injected into the action dumps exposed secrets to GitHub Actions Workflow Logs, leading to potential credential theft

[Mitigation] Immediately revoke and rotate all secrets exposed during the compromised window, and pin actions to secure commit SHA hashes

[Affected Scope] GitHub Actions workflows utilizing tj-actions/changed-files action versions v1 through v45.0.7

[Impact] Threat actors modified release tags to point to a malicious commit (0e58ed8), enabling execution of malicious code ('updateFeatures') and exfiltration of GitHub Secrets via action logs

[Mitigation] Immediately cease using the affected tags and upgrade to v46 or later, or pin the action to a trusted commit SHA

[Affected Scope] Justice AV Solutions (JAVS) Viewer Setup version 8.3.7.250-1.

[Impact] A remote, privileged threat actor can execute unauthorized PowerShell commands and gain full control over the affected system via a signed malicious binary.

[Mitigation] Immediately uninstall the compromised software and reinstall a clean, verified version from the official vendor website.