MAL-2026-17677 Malicious code in @bellaxchuu/overbugs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4bf34e6d2aa5b187e4dba9c90ce9515cd1fdc5a43f37195ba21e9cb418eb19c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17678 Malicious code in @bellaxchuu/xbailey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d07ffaff1ea6694d0579feba4090d61917939563b17e9395b875bb0c2aaf0b01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17676 Malicious code in @bellaxchuu/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69f70788aeca5b98fbe0c721d7f6a88c036d661c3f0132443a6bdb97080f5819 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17680 Malicious code in @bellaxchuu/yarnbails (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f991cf1a14df0cd0bbec0bd9340f983ea34dc98070e0e1c810e22653aecf469 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17675 Malicious code in @bellaxchuu/bails (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6ca3e47d499dc50a641bc4c0d6c01228aa55dfcf76a4c8504680ce1dc1196e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17671 Malicious code in @xayz/brat-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02a3da7453991350934623a3bb78f98f83a1ce952be9d320c4461c779e472bd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17672 Malicious code in @xayz/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a9744aa6c5f3c994e66b4847aba63d6cf1503583f0a23185c67bb32b7394e77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17674 Malicious code in brat-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53137fe02a825bde6d844ec337cba590b1c454e97e52c2792358555eea1dd76b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17669 Malicious code in @itsmee_aizat.id/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 139f48c9c1d01563d5a815d23fde2f527dba3c31c7900f7e06776507cf5e687a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @itsmee_aizat.id/baileys2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95f98902ced2f03261621ba4cb5386a892bf31ac4510b916708d3d3eb21aa50 package.json declares "libsignal": "github:tenka-san/libsignal-node" as a runtime dependency. The source is a GitHub user account unrelated to the...

USN-8905-1: Linux kernel (GCP) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8904-1: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8904-1 linux-azure, linux-azure-6.8, linux-azure-fde, linux-azure-fde-6.8, linux-azure-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8903-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8903-1 linux, linux-aws, linux-aws-6.8, linux-aws-fips, linux-fips, linux-realtime, linux-realtime-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8888-2 linux-azure-7.0, linux-azure-fde-7.0 vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8888-2: Linux kernel (Azure) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

CVE-2026-85421

A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can issue control commands, alter cluster states,...

CVE-2026-85421

A critical security vulnerability exists in Brocade ASCG versions prior to 3.5.0 . The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can exploit this flaw to issue control commands, modify syst...

EUVD-2026-94786

A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can issue control commands, alter cluster states,...