CVE-2026-80884 ntb: Store original DMA address for future release

In the Linux kernel, the following vulnerability has been resolved: ntb: Store original DMA address for future release The DMA API requires that dmafreeattrs receive the exact dmahandle originally returned by the allocation function. Do not modify it...

Malicious code in @usealloy/api-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac2459ced40bf7d07428205c0322e09c951fdc50972f337b30508ad2ad867b37 The package @usealloy/api-contract was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview @usealloy/api-contract is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

MAL-2026-2969 Malicious code in @usealloy/api-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac2459ced40bf7d07428205c0322e09c951fdc50972f337b30508ad2ad867b37 The package @usealloy/api-contract was found to contain malicious code. Source: ghsa-malware...

Malware in @usealloy/api-contract

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

curl: HAProxy Connection Reuse leads to IP Spoofing and mTLS Context Smuggling

Executive Summary libcurl fails to respect the CURLOPTHAPROXYCLIENTIP configuration when reusing existing connections. Due to a missing check in the connection pooling logic, libcurl indiscriminately reuses a TCP/TLS connection established with a specific identity IP A for subsequent requests...

Malware in lpgoffers-api-contract

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4702 Malicious code in lpgoffers-api-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34828f326d1dd1fe0606f5f7560f90381fd6ce84f68f15ac551023c8fb52a2c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lpgoffers-api-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34828f326d1dd1fe0606f5f7560f90381fd6ce84f68f15ac551023c8fb52a2c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...