Malicious code in @ifasn/md-doc-mcp (npm)

Source: amazon-inspector 808d25733e867c0cb6808f89bbed4cc90e8362b1e1a2e52759676d51bd0273bb The package is advertised as a markdown toolkit MCP server TOC generation, word count, table formatting but on require of its main module and on startup of its md-doc-mcp bin it probes cloud-provider...

Malicious code in @ifasn/md-doc-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808d25733e867c0cb6808f89bbed4cc90e8362b1e1a2e52759676d51bd0273bb The package is advertised as a markdown toolkit MCP server TOC generation, word count, table formatting but on require of its main module and on...

MAL-2026-18486 Malicious code in @ifasn/md-doc-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808d25733e867c0cb6808f89bbed4cc90e8362b1e1a2e52759676d51bd0273bb The package is advertised as a markdown toolkit MCP server TOC generation, word count, table formatting but on require of its main module and on...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: md/raid5-ppl: fix use-after-free in ppldoflush The loop in ppldoflush continues iterating after calling ppliounitfinished, touching io-pendingflushes and leading to a use-after-free. Add a break statement to stop the loop once io...

CVE-2021-23639

Overview md-to-pdf is a CLI tool for converting Markdown files to PDF. Affected versions of this package are vulnerable to Remote Code Execution RCE due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine. Usage: python3 cve-2021-23639.py targerurl...

md-to-slides (0.1.1), multi-convert (0.1.4) +1 more potentially affected by unknown CVE via is-it-ai (0.1.1)

is-it-ai PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on is-it-ai and may be impacted: - md-to-slides 0.1.1 - multi-convert 0.1.4 - skills-analyzer 0.1.1 Source cves: unknown CVE Source advisory: GHSA-76H8-W3PX-47HX...

Malicious code in md-to-slides (PyPI)

Source: kam193 b11c84f48dc5185cf83056d55f0b2fa64fa415afae3f258baa5887c1ce44bc7c In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency is-it-ai, intentionally pinned by specific versions of...

CLEANSTART-2025-YN90003 flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends

Security vulnerability affects the libssh package. A flaw was found in the libssh implements abstract layer for message digest MD operations implemented by different supported crypto backends...

MAL-2026-18428 Malicious code in md-to-slides (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b11c84f48dc5185cf83056d55f0b2fa64fa415afae3f258baa5887c1ce44bc7c In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency...

Malicious code in md-to-slides (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b11c84f48dc5185cf83056d55f0b2fa64fa415afae3f258baa5887c1ce44bc7c In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency...

md-to-slides (0.1.1), multi-convert (0.1.4) +1 more potentially affected by unknown CVE via is-it-ai (0.1.1)

is-it-ai PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on is-it-ai and may be impacted: - md-to-slides 0.1.1 - multi-convert 0.1.4 - skills-analyzer 0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-18426...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-abi-stablelists / kernel-core / kernel-debug / etc Multiple Vulnerabilities (crxsa-2026_90365)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crxsa-202690365 advisory. kernel: udp: Deal with race between UDP socket address change and rehash CVE-2024-57974 kernel: fuse: re-lock request before replacing page cache folio...

Malicious code in monte-md-baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17399 Malicious code in monte-md-baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

RHEL 9 : kernel (RHSA-2026:90365)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90365 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: udp: Deal with race between U...

RockyLinux 10 : kernel (RLSA-2026:91565)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:91565 advisory. kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146814)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146814 advisory. In the Linux kernel, the following vulnerability has been resolved: md/raid5-ppl: fix use-after-free in ppldoflush The loop in ppldoflush continues iterating after...

Oracle Linux 9 : kernel (ELSA-2026-90365)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-90365 advisory. - netfilter: flowtable: hold reference on ct until flow is released CKI Backport Bot RHEL-280075 CVE-2026-98320 - vfio/pci: clear vdev-msiperm after...

ALSA-2026:91565 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel: net: shaper: rework the VALID marking agai...