Malicious code in redis-type-intel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6f84d412afce72584ec95c5e2595987bf307b67540da51870c8a3a22b05952 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16035 Malicious code in oscar-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c988ef2dab3264cefcab98e4aae196d6c45b5555b22641e5862d89bde83815b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in oscar-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c988ef2dab3264cefcab98e4aae196d6c45b5555b22641e5862d89bde83815b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16033 Malicious code in kiki-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5b7a87ff7f08fee548c24dce02f8904d9920735f6643ec236ac00dda5c5470 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in kiki-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5b7a87ff7f08fee548c24dce02f8904d9920735f6643ec236ac00dda5c5470 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16026 Malicious code in bmc-translate-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55e2a625f0b96f6903cccac0251c6b8380cf9589a1f222e9de7e97dbf466156 package.json declares a preinstall script bun run index.js. index.js is a 500 KB javascript-obfuscator-packed module rotated string array 0x71ec,...

Malicious code in bmc-i18n-extract-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d52b44b46819aa61ff57d4863315b09f655a4fb5b5787843c2a24f85d9c6db The package's package.json declares a preinstall hook bun run index.js and lists the Bun runtime bun ^1.3.13 as a dependency, causing an obfuscated...

Malicious code in blueai-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa623814be7289a45580d8333138d25b98458b558fbe67c447294944723ec844 package.json declares "preinstall": "bun run index.js", causing npm install to execute a 499KB obfuscator.io-style file via the Bun runtime. index.js...

MAL-2026-16025 Malicious code in bmc-i18n-extract-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d52b44b46819aa61ff57d4863315b09f655a4fb5b5787843c2a24f85d9c6db The package's package.json declares a preinstall hook bun run index.js and lists the Bun runtime bun ^1.3.13 as a dependency, causing an obfuscated...

MAL-2026-16032 Malicious code in feishu-docx-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7567437816acf6d56f5ef9e5303da39aa1663ac47d547f66552a0482158d19 package.json declares "preinstall": "bun run index.js" and lists bun as a runtime dependency, so npm install fetches the alternate Bun runtime and...

MAL-2026-16024 Malicious code in blueai-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa623814be7289a45580d8333138d25b98458b558fbe67c447294944723ec844 package.json declares "preinstall": "bun run index.js", causing npm install to execute a 499KB obfuscator.io-style file via the Bun runtime. index.js...

Malicious code in feishu-docx-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7567437816acf6d56f5ef9e5303da39aa1663ac47d547f66552a0482158d19 package.json declares "preinstall": "bun run index.js" and lists bun as a runtime dependency, so npm install fetches the alternate Bun runtime and...

Malicious code in bmc-translate-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55e2a625f0b96f6903cccac0251c6b8380cf9589a1f222e9de7e97dbf466156 package.json declares a preinstall script bun run index.js. index.js is a 500 KB javascript-obfuscator-packed module rotated string array 0x71ec,...

Vulnerabilities in GeoNetwork are addressed through OpenGeo

OpenGeo has identified several vulnerabilities in GeoNetwork, a open-source cataloging application, specifically in versions 4.4.5 through 4.4.11, as well as versions preceding 4.4.12 and 4.2.17. The first vulnerability involves a reflected cross-site scripting XSS attack in the public,...

CVE-2026-81830

A flaw was found in OpenVPN. The Windows interactive service in OpenVPN contains an incorrect file path validation vulnerability. A local authenticated user could exploit this flaw to bypass the trusted configuration directory constraint, leading to a security bypass and potential integrity...

USN-8730-1: Linux kernel vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;...

USN-8730-1 linux, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-realtime vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;...

USN-8729-1 linux, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-raspi, linux-realtime, linux-realtime-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core;...

USN-8729-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core;...

Malicious code in scw-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f92fe2c0fe1acd783b5612c30ba1976c68c421b6451a68d150928e5166c362e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...