MAL-2025-190521 Malicious code in node-calculator-7bea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ddbd5a2cd94466471bef272010b7911c371022bffeeee5ec50e01a0affde411 The package node-calculator-7bea was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in node-calculator-ac24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8918452cf7ce73c18c2a4f90264358ac5db009921c8418680cac74f0ff9a04 The package node-calculator-ac24 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in node-calculator-c213 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9aa404312edd44fdddfae5d4815b452d286fd3a0510ccdfd8f9f03a61c007c The package node-calculator-c213 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190518 Malicious code in node-calculator-9e41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 283c5db462cf0679ba77dc6514f4e2197f08e499ff7ce13c3705a6a3e8cff536 The package node-calculator-9e41 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in node-calculator-9e41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 283c5db462cf0679ba77dc6514f4e2197f08e499ff7ce13c3705a6a3e8cff536 The package node-calculator-9e41 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in node-calculator-1b6e (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9836f0c7c84a6804c063c9e845dd05381413f1c6c9fe2b6d8e1d70473a80a456 The package node-calculator-1b6e was found to contain malicious code. Source: ossf-package-analysis...

[SECURITY] Fedora 41 Update: python-pdfminer-20240706-3.fc41

Pdfminer.six is a community maintained fork of the original PDFMiner. It is a tool for extracting information from PDF documents. It focuses on getting and analyzing text data. Pdfminer.six extracts the text from a page directly from the sourcecode of the PDF. It can also be used to get the exact...

[SECURITY] Fedora 42 Update: python-pdfminer-20240706-4.fc42

Pdfminer.six is a community maintained fork of the original PDFMiner. It is a tool for extracting information from PDF documents. It focuses on getting and analyzing text data. Pdfminer.six extracts the text from a page directly from the sourcecode of the PDF. It can also be used to get the exact...

[SECURITY] Fedora 43 Update: python-pdfminer-20251107-1.fc43

Pdfminer.six is a community maintained fork of the original PDFMiner. It is a tool for extracting information from PDF documents. It focuses on getting and analyzing text data. Pdfminer.six extracts the text from a page directly from the sourcecode of the PDF. It can also be used to get the exact...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 2 security fixes: 460017370 High CVE-2025-13223: Type Confusion in V8. Reported by Clément Lecigne of Google's Threat Analysis Group on 2025-11-12 450328966 High CVE-2025-13224: Type Confusion in V8. Reported by Google Big Sleep on 2025-10-09...

AutoMalDesc: Large-Scale Script Analysis for Cyber Threat Research

Generating thorough natural language explanations for threat detections remains an open problem in cybersecurity research, despite significant advances in automated malware detection systems. In this work, we present AutoMalDesc, an automated static analysis summarization framework that, followin...

Exploring AI in Steganography and Steganalysis: Trends, Clusters, and Sustainable Development Potential

Steganography and steganalysis are strongly related subjects of information security. Over the past decade, many powerful and efficient artificial intelligence AI - driven techniques have been designed and presented during research into steganography as well as steganalysis. This study presents a...

HSEC-2025-0002 Double Public Key Signing Function Oracle Attack on Ed25519

Double Public Key Signing Function Oracle Attack on Ed25519 The standard specification of Ed25519 message signing involves providing the algorithm with a message and private key. The function will use the private key to compute the public key and sign the message. Some libraries provide a variant...

MAL-2025-190493 Malicious code in com.unity.polyspatial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76efa94c9f9541ca5cd9a534a103bd5ffebc05bb770e05ffdaf62e4af38942bc The package com.unity.polyspatial was found to contain malicious code. Source: ghsa-malware...

Brightpick Mission Control / Internal Logic Control (Update A)

RISK EVALUATION Successful exploitation of these vulnerabilities could result in the exposure of sensitive information and the manipulation of critical functions by an attacker. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these...

An In-Depth Systematic Analysis of the Security, Usability, and Automation Capabilities of Password Update Processes on Top-Ranked Websites

Password updates are a critical account security measure and an essential part of the password lifecycle. Service providers and common security recommendations advise users to update their passwords in response to incidents or as a critical cyber hygiene measure. However, password update processe...

Robustness of LLM-Enabled Vehicle Trajectory Prediction under Data Security Threats

The integration of large language models LLMs into automated driving systems has opened new possibilities for reasoning and decision-making by transforming complex driving contexts into language-understandable representations. Recent studies demonstrate that fine-tuned LLMs can accurately predict...

EUVD-2025-149743

Malicious code in teagood-lokina99 npm...

EUVD-2025-147842

Malicious code in tehah-mana-konatol npm...

ROS-20251112-10

Vulnerability in the Open Babel expert system for analyzing chemical data is related to a manipulation in the function ChemKinFormat::ReadReactionQualifierLines of the /src/formats/chemkinformat.cpp file. Exploitation of the vulnerability could allow an attacker to cause a denial of service A...