MAL-2025-48022 Malicious code in astra-db-recommendations-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f406ad9e38dd12903b516bd5bc543aee1c02d1e5641d513bf0a6d1ddb9ce7f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview astra-db-recommendations-starter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

EUVD-2025-32969

Malicious code in astra-db-recommendations-starter npm...

EUVD-2024-53071

Malicious code in bioql PyPI...

EUVD-2024-26763

Malicious code in bioql PyPI...

EUVD-2025-9231

Malicious code in bioql PyPI...

EUVD-2023-53738

Malicious code in bioql PyPI...

EUVD-2023-48507

Malicious code in bioql PyPI...

EUVD-2024-44868

Malicious code in bioql PyPI...

EUVD-2024-27301

Malicious code in bioql PyPI...

The vulnerability of the parsec_hook_setxattr function in the Linux kernel-module astra-modules allows a hacker to cause a service failure.

The vulnerability of the parsechooksetxattr function in the Linux kernel-module astra-modules is related to the lack of checking for the returned value. Exploiting this vulnerability could allow a attacker to cause a service failure...

Astra Linux – Vulnerability in Qt4-X11

In Qt 5.0.0 through 5.15.2, as well as in Qt 6.0.0 through 6.2.1, there is an out-of-bounds write in the function QtPrivate::QCommonArrayOps::growAppend, which is called from QPainterPath::addPath and QPathClipper::intersect...

Astra Linux – Vulnerability in WebKit2GTK

A vulnerability related to out-of-bounds reads has been addressed through improved input validation. This issue is fixed in Safari 18.6, iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, and watchOS 11.6. Processing maliciously crafted web content may disclose internal states of...

Astra Linux – Vulnerability in Qt4-X11

An integer overflow vulnerability exists in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allowing local attackers to cause a denial of service DoS attack...

Astra Linux – Vulnerability in Chromium

Integer overflow in V8 in Google Chrome prior to version 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Using “after free” in WebRTC in Google Chrome before version 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in WebKit2GTK

The issue was resolved through improved user interface. This issue has been fixed in Safari 18.6, iOS 18.6, and iPadOS 18.6. Visiting a malicious website may result in address bar spoofing...

Astra Linux – Vulnerability in Chromium, WebKit2GTK

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to version 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in libpod, golang-github-containers-buildah

A vulnerability was discovered in podman build and buildah. This issue occurs when using the --jobs=2 option in a container breakout scenario, and it involves a race condition during the building of a malicious Containerfile. SELinux may mitigate this issue, but even with SELinux enabled, it stil...

Astra Linux – Vulnerability in WebKit2GTK

A logic issue has been resolved through improved checks. This issue is fixed in Safari 18.6 and macOS Sequoia 15.6. The origin of a download may be incorrectly associated...