MAL-2025-49363 Malicious code in webpack-jsxcompile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1289849e9c1d4556c66e99e25355b9cc16086d11caa692f0832b4799687113e9 The package webpack-jsxcompile was found to contain malicious code. Source: ghsa-malware...

Malicious code in webpack-jsxcompile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1289849e9c1d4556c66e99e25355b9cc16086d11caa692f0832b4799687113e9 The package webpack-jsxcompile was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49356 Malicious code in aes-valid-ipherv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f22d763f4c915454a17152533dbf628f16eef45bf66f27ecf13414baa94002c The package aes-valid-ipherv was found to contain malicious code. Source: ghsa-malware 22297960d5b9fc9c09290fc460a632ff653b9b660089fa10ffff05c2efc053...

MAL-2025-49360 Malicious code in node-xpnav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f358100a356075faa746b4929e5c4afd67b681e4fd85dd4e8d570af09aae4da The package node-xpnav was found to contain malicious code. Source: ghsa-malware ecad27e5e27726e4839a252c295fcd6d7a77504b7f74944706a47f7bb2a715cb Any...

Lexmark Printers Improper Input Validation (CVE-2022-29850)

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

CVE-2025-34501

Deck Mate 2 is distributed with static, hard-coded credentials for the root shell and web user interface, while multiple management services SSH, HTTP, Telnet, SMB, X11 are enabled by default. If an attacker can reach these interfaces - most often through local or near-local access such as...

MAL-2025-49353 Malicious code in jsonretype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f5153794835635057bad05300635360b4d6601aee683831850a767d139b4dbc The package jsonretype was found to contain malicious code. Source: ghsa-malware 95bc6e978289ad50ccb9d7e8a9656e9324b18e7d85d9765ac24a158b7d6e8a5e Any...

Malicious code in axis-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09aeea2ea73dbe2f884c0231d608d337880bb8bfd99f38837bb012f8f952eba1 The package axis-tools was found to contain malicious code. Source: ghsa-malware aa8f4e19cbedf81f11461e5e9017bd02d7135a5f126ed59b58b3669d6a7c8156 Any...

Malicious code in wdk-pricing-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c93fe5d1e216edcbf2fbabc1a210e2d2265a37dc038caa8477fee167dfd2f6b0 The package wdk-pricing-provider was found to contain malicious code. Source: ghsa-malware...

Malicious code in make-vis-flexible (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4b327a21d49613743c6cd4f96d8eeee813ad7a28252373da14202debcf4712 The package make-vis-flexible was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49327 Malicious code in orderly-network-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec35c18a8349d3d2dd52575ffa769fa141be9d1c7b99b0a3e95d994af6acb495 The package orderly-network-config was found to contain malicious code. Source: ghsa-malware...

Malicious code in containerization-assist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79aa72c875d99fe35db3e9de0382cc573aafe3a6a85d23ffcd7d6e47291e9f7f The package containerization-assist was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49330 Malicious code in wdk-pricing-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c93fe5d1e216edcbf2fbabc1a210e2d2265a37dc038caa8477fee167dfd2f6b0 The package wdk-pricing-provider was found to contain malicious code. Source: ghsa-malware...

Malicious code in monoblast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d77da2ba877fe8f60939aa31a965bd4b4f0a4265edff812ebd8817aa008c674 The package monoblast was found to contain malicious code. Source: ghsa-malware 528645f69305646755172e18341eb5b57038d4f5f46faa93b040fc361e85fedf Any...

MAL-2025-49325 Malicious code in monoblast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d77da2ba877fe8f60939aa31a965bd4b4f0a4265edff812ebd8817aa008c674 The package monoblast was found to contain malicious code. Source: ghsa-malware 528645f69305646755172e18341eb5b57038d4f5f46faa93b040fc361e85fedf Any...

Malicious code in react-ui-animates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faea1c84618f620702405ada06f82a0352d57b6f8544e33b87cde589284b5ef1 The package react-ui-animates was found to contain malicious code. Source: ghsa-malware...

Exploit for CVE-2024-7387

overview cve-2024-7387https://nvd.nist.gov/vuln/detail/C...

Exploit for CVE-2024-7387

overview cve-2024-7387https://nvd.nist.gov/vuln/detail/C...

ASD Warns of Ongoing BADCANDY Attacks Exploiting Cisco IOS XE Vulnerability

The Australian Signals Directorate ASD has issued a bulletin about ongoing cyber attacks targeting unpatched Cisco IOS XE devices in the country with a previously undocumented implant known as BADCANDY. The activity, per the intelligence agency, involves the exploitation of CVE-2023-20198 CVSS...

Astra Linux – Vulnerability in MariaDB

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. The supported versions affected are 8.0.0–8.0.41, 8.4.0–8.4.4, and 9.0.0–9.2.0. This vulnerability is difficult to exploit; it allows low-privilege attackers with network access via multiple protocols to...