Malicious code in @clausehq/flows-step-jsontoxml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55490991efb020a37958f1460276c1439d022da66dd47d2799e4e676c1d898a2 The package @clausehq/flows-step-jsontoxml was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191246 Malicious code in @micado-digital/stadtmarketing-kufstein-external (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b458f23284c11d0533df6f7d474554467329282fb52e761f0a654ef8cf69f3e The package @micado-digital/stadtmarketing-kufstein-external was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191235 Malicious code in @ifelsedeveloper/protocol-contracts-svm-idl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd130cc8248982ebd1e7e043ae67c7d32e9c0d7024c47f51d5af0e9fa1c12c29 The package @ifelsedeveloper/protocol-contracts-svm-idl was found to contain malicious code. Source: ghsa-malware...

Malicious code in simplejsonform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d512e223b9a2375fd46539f1b0434e092f755c299f20b1d054c538228d266436 The package simplejsonform was found to contain malicious code. Source: ghsa-malware fd81fbb7b9cb8cfc5e4444da9cd2d18ed54ec4b7bb741f0ad95a56ce29a5edd0...

Malicious code in @dev-blinq/cucumber_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db4a451970465311f6a1d2b9ac8b4713f2f4ff114aa37c12dd0daff6032c8ab6 The package @dev-blinq/cucumberclient was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trackstar/angular-trackstar-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7a5bb22cafe26b985d8470c0ee240b4b2b201efd50c36c27620ff397d01863 The package @trackstar/angular-trackstar-link was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191314 Malicious code in @silgi/graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0404f9aa498b1721d9dfffbbd0f41cb66d195675fa5a3b9e71fec42153b0e9 The package @silgi/graphql was found to contain malicious code. Source: ghsa-malware 131ca7201ac4ce3abb97a2f5940ad11186f384fb0190ddcaf14d36be20ea0d95...

MAL-2025-191028 Malicious code in @lessondesk/electron-group-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0a3fb5a82613479f65dbe89f633c1db69447886fc383477e3e4ae4a31be1ad The package @lessondesk/electron-group-api-client was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191094 Malicious code in flapstacks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3e9f1a599a57853dfcaac8296e337783da36d9fbdf2545320a59a3ac12114e The package flapstacks was found to contain malicious code. Source: ghsa-malware 26f6aaeff17a92e5a6df4148bfbcbaf24b10d838e3623a219ea63a5e5440d7fe Any...

MAL-2025-190997 Malicious code in react-native-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96159f9c8f74a56ea1f03322401befd0e090840e21dff7d1cc37db649e8cd58 The package react-native-fetch was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190999 Malicious code in react-native-google-maps-directions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb0fc868ff9cbddc19692db858eff3de665ee0d6dc12a0417f7bd6fb6393a99 The package react-native-google-maps-directions was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191002 Malicious code in react-native-modest-storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649036aaea8dd08096297925551b715d5783be0879a69a6651f2cfd66b8ee75f The package react-native-modest-storage was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191007 Malicious code in react-qr-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0000767e8d42376cf8a198fa59803da5acb13d0317314fcb57902d5d373f035 The package react-qr-image was found to contain malicious code. Source: ghsa-malware 72459a160e75d16a5a10d9805d6c558aabb61428411359b97050ebf70be1270f...

MAL-2025-190972 Malicious code in itobuz-angular-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afed61db59aa59cee728d1b2cbe413a85ae32a192004efad9e9d126770433bdf The package itobuz-angular-auth was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190866 Malicious code in @ensdomains/buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae46f5c19a843ced3c421c4ef2bb7fc8c6dc112240fc84abafd26405d0a85bf The package @ensdomains/buffer was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190846 Malicious code in go-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de2b1faf83824d6073ab908373d9704ee8fb7cb05322cfb6cedc079603455f10 The package go-template was found to contain malicious code. Source: ghsa-malware 508770194aad24fbaa79597bcc1a3f618b9397f2ad3f6fd1dc06c5dc0938a6ee An...

MAL-2025-190783 Malicious code in skills-use (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f974e3dc3206af78c8a6fd5370b73dc14d8edc1f052caa4992fdca5c5bac45ac The package skills-use was found to contain malicious code. Source: ghsa-malware 25e55ca30592985c5f31158f8bd68d19643e2b48db1cf4578a7da6ae380ed661 Any...

MAL-2025-190726 Malicious code in @ensdomains/curvearithmetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8d0412a2e09e5e875c436da127697b8fe370cc878272dc55216b4d6b16d13c The package @ensdomains/curvearithmetics was found to contain malicious code. Source: ghsa-malware...

CVE-2025-40068

In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: Fix integer overflow in rununpack The MFT record relative to the file being opened contains its runlist, an array containing information about the file's location on the physical disk. Analysis of all Call Stack paths...

CVE-2025-40068 fs: ntfs3: Fix integer overflow in run_unpack()

In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: Fix integer overflow in rununpack The MFT record relative to the file being opened contains its runlist, an array containing information about the file's location on the physical disk. Analysis of all Call Stack paths...