EUVD-2025-199420

Malicious code in @voiceflow/dependency-cruiser-config npm...

EUVD-2025-199378

Malicious code in @voiceflow/vitest-config npm...

MAL-2025-191377 Malicious code in @voiceflow/stylelint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9df11f1c81595a1f98a654806fb14064550147575b073cc1d049a0ef9f875f The package @voiceflow/stylelint-config was found to contain malicious code. Source: ghsa-malware...

Malicious code in @voiceflow/husky-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4de04a484b7919bb905ccfcc2621196b18f11dc604a7b6e173b531f86c031c The package @voiceflow/husky-config was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199423

Malicious code in @voiceflow/commitlint-config npm...

MAL-2025-191353 Malicious code in @voiceflow/husky-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4de04a484b7919bb905ccfcc2621196b18f11dc604a7b6e173b531f86c031c The package @voiceflow/husky-config was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191200 Malicious code in @chtijs/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13d42ca03eebf6bafc9addea00583d377c625dfac5eaff226bc3b0a155788c8 The package @chtijs/eslint-config was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199334

Malicious code in @chtijs/eslint-config npm...

Malicious code in @chtijs/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13d42ca03eebf6bafc9addea00583d377c625dfac5eaff226bc3b0a155788c8 The package @chtijs/eslint-config was found to contain malicious code. Source: ghsa-malware...

AlmaLinux 10 : shadow-utils (ALSA-2025:20145)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:20145 advisory. shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise CVE-2024-56433 Tenable has extracted the preceding description blo...

SUSE SLES15: libipa_hbac-devel / libipa_hbac0 / libsss_certmap-devel / etc (SUSE-SU-2025:4182-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4182-1 advisory. - CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plug...

EUVD-2025-199278

Malicious code in @viapip/eslint-config npm...

EUVD-2025-199177

Malicious code in @lessondesk/eslint-config npm...

Malicious code in @lessondesk/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef9fcb377fe99dad0e34ec63a5ac929adfc5d8be48e49d330d4785e1d2a6a7f The package @lessondesk/eslint-config was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191029 Malicious code in @lessondesk/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef9fcb377fe99dad0e34ec63a5ac929adfc5d8be48e49d330d4785e1d2a6a7f The package @lessondesk/eslint-config was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190960 Malicious code in eslint-config-nitpicky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574a6235abe523aed3a5411fc8472635c6c8d455b973bcb79f3424effe0fd99b The package eslint-config-nitpicky was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199083

Malicious code in eslint-config-nitpicky npm...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

CVE-2025-63958

MILLENSYS Vision Tools Workspace 6.5.0.2585 exposes a sensitive configuration endpoint /MILLENSYS/settings that is accessible without authentication. This page leaks plaintext database credentials, file share paths, internal license server configuration, and software update parameters. An...