Malicious Package

Overview babel-polyfill-plugin-corejs2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Security Bulletin: IBM Maximo Application Suite runtime-7.28.4.tgz which is vulnerable to CVE-2025-27789.

Summary IBM Maximo Application Suite uses runtime-7.28.4.tgz which is vulnerable to CVE-2025-27789. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-27789 DESCRIPTION: Babel is a compiler for writing next generation JavaScript...

Security Bulletin:Vulnerability in core affects IBM Netezza Appliance

Summary The core package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-49356 Vulnerability Details CVEID:CVE-2026-49356 DESCRIPTION: Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected ...

[SECURITY] Fedora 43 Update: bird-3.3.2-1.fc43

BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border Gateway Protocol BGPv4, Routing Information Protocol RIPv2, RIPng, Open Shortest Path First protocol OSPFv2, OSPFv3, Babel Routing Protocol Babel, Bidirectional Forwarding Detection BFD, IPv6 router advertisements, static...

[SECURITY] Fedora 44 Update: bird-3.3.2-1.fc44

BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border Gateway Protocol BGPv4, Routing Information Protocol RIPv2, RIPng, Open Shortest Path First protocol OSPFv2, OSPFv3, Babel Routing Protocol Babel, Bidirectional Forwarding Detection BFD, IPv6 router advertisements, static...

Arbitrary code execution (RCE) @babel/traverse dependency in Jira Software Data Center

This is a vulnerability in a non-Atlassian Jira Software Data Cente dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This vulnerability affects certain versions of Atlassian Jira Software Data Center. The @babel/traverse dependency is affected b...

RCE (Remote Code Execution) @babel/plugin-transform-modules-systemjs Dependency in Jira Service Management Data Center

This High severity RCE Remote Code Execution vulnerability was introduced in versions 10.0.0, 10.1.1, 10.3.20, and 11.3.8 of Jira Service Management Data Center. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:...

RCE (Remote Code Execution) @babel/plugin-transform-modules-systemjs Dependency in Jira Software Data Center

This High severity RCE Remote Code Execution vulnerability was introduced in versions 9.17.2, 10.0.0, 10.1.1, 10.3.20, and 11.3.8 of Jira Software Data Center. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H...

MAL-2026-11742 Malicious code in @ornikar/babel-preset-react (npm)

npm/@ornikar/babel-preset-react is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11740 Malicious code in @ornikar/babel-preset-base (npm)

npm/@ornikar/babel-preset-base is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

CLSA-2026-1784769522 TuxCare security update for @babel (2 CVEs)

TuxCare rebuilt 148 @babel packages to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

CLSA-2026-1784683001 TuxCare security update for @babel (1 CVE)

TuxCare rebuilt 148 @babel packages to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1784509777 TuxCare security update for @babel (1 CVE)

TuxCare rebuilt 154 @babel packages to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

CLSA-2026-1784596301 TuxCare security update for @babel (1 CVE)

TuxCare rebuilt 154 @babel packages to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

CLSA-2026-1775781187 TuxCare security update for 4 packages (1 CVE)

TuxCare rebuilt 4 packages to address 1 CVE. Fixed in 7.11.2-tuxcare.1...

PT-2026-75523

TuxCare rebuilt 154 @babel packages to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

PT-2026-75481

TuxCare rebuilt 154 @babel packages to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

PT-2026-75627

TuxCare rebuilt 148 @babel packages to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

PT-2026-75591

TuxCare rebuilt 148 @babel packages to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-49356)

Summary IBM Security SOAR uses an older version of the @babel/core component that may be identified and exploited. Updates for supported versions have been released which address the issue. It is recommended to upgrade to version 51.0.10.2 Vulnerability Details CVEID:CVE-2026-49356 DESCRIPTION:...