Malicious Package

Overview @jdtaro/dynamic-devtools-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

Malicious code in @jdtaro/dynamic-devtools-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31153e0cd25bffc9c1582e7fe176e131e49c4a1fdfdc58c55cdf25dcd99a5b55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-35150

Malicious code in @jdtaro/dynamic-devtools-utils npm...

EUVD-2025-35138

Malicious code in reactify-utils npm...

Malicious Package

Overview reactify-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

The vulnerability of the FeedUtils::formatDiffRow2() function in the Feed Utils component of the MediaWiki hypertext environment allows a violator to execute arbitrary code.

The vulnerability of the FeedUtils::formatDiffRow2 function in the Feed Utils component of the MediaWiki software framework relates to improper encoding or escaping of output data when processing the newpage parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary cod...

unic (>=0.5.0, <=0.6.0), unic-bidi (0.6.0) +12 more potentially affected by unknown CVE via unic-utils (>=0.5.0, <=0.6.0)

unic-utils CARGO version =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.6.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0091...

`unic-utils` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained...

RUSTSEC-2025-0091 `unic-utils` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained...

Malicious code in metronome-utils (npm)

The package metronome-utils was found to contain malicious code...

MAL-2025-48501 Malicious code in metronome-utils (npm)

The package metronome-utils was found to contain malicious code...

Malicious code in deficonnect-internal-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6f3098a58343ae74219c429df56aab7d01b71a39b84a9165b0ee3679a6964f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview deficonnect-internal-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2025-48421 Malicious code in deficonnect-internal-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6f3098a58343ae74219c429df56aab7d01b71a39b84a9165b0ee3679a6964f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-34521

Malicious code in deficonnect-internal-utils npm...

PT-2025-46637

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ASoC amd/sdw utils component where a NULL pointer dereference may occur if devm kasprintf fails during memory allocation. Specifically, a debu...

Malicious code in internal-greeter-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aba71c91c57a929f6d02d2775a1e431ee72be5d4e13215c18875202086b0c4e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48409 Malicious code in internal-greeter-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aba71c91c57a929f6d02d2775a1e431ee72be5d4e13215c18875202086b0c4e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OESA-2025-2376 cjson security update

cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file. %package devel Summary: Development files for cJSON Requires: = - %description devel The cjson-devel package contains libraries and header files for developing...

Malicious code in sp-web-utils-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18030241ea8f0cd79b1c6d323dfb7f1de0ede76c967166f73fcf51108f2ecc52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...