MAL-2025-21410 Malicious code in gifhorse-cli (npm)

The package gifhorse-cli was found to contain malicious code...

MAL-2025-22080 Malicious code in h1-cli-ext-root-auth (npm)

The package h1-cli-ext-root-auth was found to contain malicious code...

MAL-2025-39082 Malicious code in wepack-cli (npm)

The package wepack-cli was found to contain malicious code...

MAL-2025-20562 Malicious code in fin-vue-cli (npm)

The package fin-vue-cli was found to contain malicious code...

MAL-2025-17112 Malicious code in cli-plugin-graphql (npm)

The package cli-plugin-graphql was found to contain malicious code...

MAL-2025-17120 Malicious code in cli-theme (npm)

The package cli-theme was found to contain malicious code...

MAL-2025-17116 Malicious code in cli-qa (npm)

The package cli-qa was found to contain malicious code...

MAL-2025-15913 Malicious code in bnrn-cli-test (npm)

The package bnrn-cli-test was found to contain malicious code...

MAL-2025-15912 Malicious code in bnrn-cli-snapshot (npm)

The package bnrn-cli-snapshot was found to contain malicious code...

MAL-2025-33109 Malicious code in shop-minis-cli (npm)

The package shop-minis-cli was found to contain malicious code...

MAL-2025-31878 Malicious code in read-cli-input (npm)

The package read-cli-input was found to contain malicious code...

MAL-2025-22078 Malicious code in h1-cli-device-node (npm)

The package h1-cli-device-node was found to contain malicious code...

CVE-2025-20220

A vulnerability in the CLI of Cisco Secure Firewall Management Center FMC Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. This vulnerability is due to improper inp...

Malicious code in st-py-de-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a0110859887f6cd8d6e81ff1c6715dd4a5d2a1c84c28b71cb09320e33e10cce5 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-41768 Malicious code in st-py-de-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a0110859887f6cd8d6e81ff1c6715dd4a5d2a1c84c28b71cb09320e33e10cce5 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2025-55345

CVE-2025-55345 concerns OpenAI Codex CLI when used in a restricted workspace-write sandbox. The issue arises because symlinks are followed outside the allowed current working directory in a malicious context (repo/directory), enabling arbitrary file overwrite and potentially remote code execution...

CVE-2025-55345 Unsafe symlink following in restricted workspace-write sandbox leads to RCE

Using Codex CLI in workspace-write mode inside a malicious context repo, directory, etc could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory...

PT-2025-32971 · Codex Cli · Codex Cli

Name of the Vulnerable Software and Affected Versions: Codex CLI affected versions not specified Description: Using Codex CLI in workspace-write mode within a malicious context repository, directory, etc. may lead to arbitrary file overwrite and potentially remote code execution. This occurs...

SUSE SLES15 / openSUSE 15 Security Update : amber-cli (SUSE-SU-2025:02769-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02769-1 advisory. - Update to version 1.13.1+git20250329.c2e3bb8: CVE-2025-30204: Fixed jwt-go excessive memory allocation during header parsin...

OpenAI Codex CLI 安全漏洞

OpenAI Codex CLI is an OpenAI open source lightweight coding agent software that runs in the terminal. A security vulnerability exists in OpenAI Codex CLI that stems from the fact that use of Codex CLI in a malicious context could lead to arbitrary file overwriting and potential remote code...