MAL-2025-47211 Malicious code in tailwind-configs-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eee3c791a92600ef66a7c4165e740bfeda8da8dad109a35e6db271d6fe07caf7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AZL-67193 CVE-2025-39767 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Optimize module load time by optimizing PLT/GOT counting When enabling CONFIGKASAN, CONFIGPREEMPTVOLUNTARYBUILD and CONFIGPREEMPTVOLUNTARY at the same time, there will be soft deadlock, the relevant logs are as follows...

Malicious code in tailwind-configs (npm)

The package tailwind-configs was found to contain malicious code...

MAL-2025-42091 Malicious code in tailwind-configs (npm)

The package tailwind-configs was found to contain malicious code...

Malicious code in cli-configs (npm)

The package cli-configs was found to contain malicious code...

Malicious code in paychex-grunt-configs (npm)

The package paychex-grunt-configs was found to contain malicious code...

MAL-2025-17103 Malicious code in cli-configs (npm)

The package cli-configs was found to contain malicious code...

MAL-2025-23951 Malicious code in json-configs (npm)

The package json-configs was found to contain malicious code...

MAL-2025-11319 Malicious code in @zalastax/nolb-eslint-configs (npm)

The package @zalastax/nolb-eslint-configs was found to contain malicious code...

Malicious code in json-configs (npm)

The package json-configs was found to contain malicious code...

Malicious code in @zalastax/nolb-eslint-configs (npm)

The package @zalastax/nolb-eslint-configs was found to contain malicious code...

MAL-2025-28938 Malicious code in paychex-grunt-configs (npm)

The package paychex-grunt-configs was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-38132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coresight: holding cscfgcsdevlock while removing cscfg from csdev There'll be possible race scenario for coresight config: CPU0 CPU1 perf enable load module...

Malicious code in acronis-platform-configs (npm)

The package communicates with a domain associated with malicious activity...

CVE-2022-30971

Jenkins Storable Configs Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-30972

A cross-site request forgery CSRF vulnerability in Jenkins Storable Configs Plugin 1.0 and earlier allows attackers to have Jenkins parse a local XML file e.g., archived artifacts that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery...

CVE-2020-2277

Jenkins Storable Configs Plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jenkins controller...

CVE-2024-56428

The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials from the CONFIGS table for their servers configured in the client...

itech iLabClient 安全漏洞

itech iLabClient is a powerful sender-side lab data receiving software from itech. A security vulnerability exists in itech iLabClient version 3.7.1 that originates from a local attacker being able to read plaintext credentials in the CONFIGS table...

CVE-2024-56428

The CVE-2024-56428 entry concerns itech iLabClient 3.7.1. A local attacker can read cleartext credentials stored in the local iLabClient database (CONFIGS table), exposing server configuration secrets and compromising confidentiality. The underlying issue is local access to the client database ra...