MAL-2025-1521 Malicious code in twilio-realtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b685743691677bab2a820511e27dea13c5ce9441dbd97ca3a24dca0cb92a8a8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @maheshtestorg/maheshtestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eacc15d981c527f9ae0a2007c6a379418fa4fd05d4fe903b0216e19aaed08634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1511 Malicious code in spacelift-webhook-receiver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6bb9dc87c1669be92bee0be50a372fb87d1d92064bc4db257131d4323c2783e9 The OpenSSF Package Analysis project identified 'spacelift-webhook-receiver' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

Malicious code in spacelift-webhook-receiver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6bb9dc87c1669be92bee0be50a372fb87d1d92064bc4db257131d4323c2783e9 The OpenSSF Package Analysis project identified 'spacelift-webhook-receiver' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

Malicious code in wasm-test-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware babc522f7d7785ae4fbf04d28f89e4db9b46fbec0308879dad88b4b27542f1bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1507 Malicious code in myconfusedfunctionpoctestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7bb8885e6f11e787f3b0b6d58c7b08bcaa2c52c25609aa5728f9e7c4a323eaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mygcpconfusedfunctionpoctestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d791e46a1741fda065be23dc9ee80e6237ac32eeee9718c46c2f50070d84c30f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 41 Update: gnutls-3.8.9-2.fc41

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...

Malicious code in elastic-buildkite-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 889d976fe581d0e221dc91fb52cc010669d68189ba293e437a6966b6decd515f The OpenSSF Package Analysis project identified 'elastic-buildkite-manager' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-1464 Malicious code in archon7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f53d83b877f02c6e6b51cad5ccf4940a0e19e8e9aeda69d9a9d013ca471bd64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1463 Malicious code in sysaid-infra-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32067df7060881cbe716c03dd7dc8c3b443263f314412e89e99a435622227b1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ab-typescript-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dff357f39e4f6c3cdfa2b8e8ef8d23e3b77159f31f825545ce19fd8a9150f869 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in archon5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49f96513d49b650de14afd8f58eb7a9af6e3f48e3af96d2fff186b24b49aa28d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1461 Malicious code in archon5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49f96513d49b650de14afd8f58eb7a9af6e3f48e3af96d2fff186b24b49aa28d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in archon2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2efbecb91840f3bd10abd707ee59f45fc25c310b59477444324c0d40c7e128bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the NFC component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the NFC component in the Linux operating system’s kernel is related to insufficient validation of input data in the nciaddnewprotocol function. Exploiting this vulnerability could allow a perpetrator to cause service failures...

Malicious code in linter-coffee-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 292d0ff0a104c6e415fc2ea734ec189f699d6aecb4383502759e2053adddfb45 The OpenSSF Package Analysis project identified 'linter-coffee-variables' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-1388 Malicious code in zmcrypty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee24745300aa11ed0e92813032e7269a17e9c66f73b03ac3e38e6bd613268e1c The OpenSSF Package Analysis project identified 'zmcrypty' @ 66.6.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in tesdf45454t (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bab99ac2b3599508ec9355c7499892e486ae8d8d433fa04e1da03449d7e0993 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1391 Malicious code in voiceedgelite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fd93b14a943a875efb1d2602d31cc497e92f135adac765f65f2a0ffd72d6ad42 The OpenSSF Package Analysis project identified 'voiceedgelite' @ 1.1.5 npm as malicious. It is considered malicious because: - The package...