Malware in hanncap

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17734 Malicious code in asepxyz-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9e873795c4634852530066ca11f554da84043934f246df7b3edbe868ea343ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17741 Malicious code in pahinuy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b0dc50f5fd68994ec471647de7ba2967f2fd3cf25094377e885e60ec6f01da9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17738 Malicious code in asepxyzxrazamodsnew-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ead2c2294eec38c18f277f87b0fe28dad253a234ad0b64d6a2ea5047a485031e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17732 Malicious code in asepxyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a030b2e7355868ec048715d3954a8dcd6689ea26675fd1a2121c5951d95c7a75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17736 Malicious code in asepxyz12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e236cb25f35bff117282c886b6c949b77b0e6dcc0362b69d088fc14ad832648 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17742 Malicious code in razamodsxasepxyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fb9a16f3dca74ebd287b9b69371219076159f7f68d3bf1d9f2b2d306702db90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in asepxyznew

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in razamodsxasepxyz

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in asepxyz12

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17737 Malicious code in asepxyznew (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35391863019c89ac27cfaed9c4356c6ae6ac413dd18bbc823503e7a004a146ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17731 Malicious code in @aseppxyzz12/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0c3a4c58c42cbe1dc7135a6b4ff75cf3242ba4b65463994ff78cdec19f53698 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-8911-1: Linux kernel (OEM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Hardware crypto device drivers; - NVIDIA Tegra memory controller driver; - Network drivers; - USB core drivers; -...

USN-8911-1 linux-oem-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Hardware crypto device drivers; - NVIDIA Tegra memory controller driver; - Network drivers; - USB core drivers; -...

Use-after-free

The zstd-jni library is vulnerable to a use-after-free. The vulnerability is due to improper memory management during dictionary loading, which allows a remote attacker to potentially exploit the freed memory and compromise application stability or security...

BIT-GHOST-2026-103292 Ghost 0.5.3 before 6.50.0 Cross-Site Scripting via ghost_head

Ghost versions from 0.5.3 through versions prior to 6.50.0 fail to sanitize the data placed in the JSON-LD HTML tag emitted by the ghosthead helper. An authenticated user with limited privileges can inject unescaped content that is rendered as script in the published page, potentially leading to...

USN-8887-3: Linux kernel vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8903-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8903-2 linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

Cross-Site Scripting (XSS)

Ghost is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to imported SVG images being stored without sanitization, which allows an attacker to convince an Administrator to import a crafted file and host malicious scripts on the site's domain, potentially compromising staff users'...