@angular-devkit/build-angular (>=20.2.0-next.3, <=21.0.0-next.2), @angular/build (>=20.2.0-next.3, <=21.0.0-next.2) +30 more potentially affected by CVE-2025-58751 via vite (>=7.1.0, <=7.1.4)

vite NPM version =7.1.0, =20.2.0-next.3, =20.2.0-next.3, =2.1.2-alpha.0, =2.14.0, =30.0.0, =16.0.1, =21.0.0-alpha.10, =21.0.0-alpha.10, =2.19.8, =2.19.8, =14.314.0, =14.314.0, =9.6.3, =0.0.0-snapshot-0360a7c2f707db55df213993503b56c6a1d96d0e, =0.4.0-dev.8 and more Source cves: CVE-2025-58751 Sourc...

MAL-2025-41436 Malicious code in @nx/devkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b11cb4be7497510402676b2b593e6a5d3e0dee4e1443996403e8aa496f284f3 Summary Malicious versions of the nx package, as well as some supporting plugin packages, were published to npm, containing code that scans the file...

Malicious code in @nx/devkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b11cb4be7497510402676b2b593e6a5d3e0dee4e1443996403e8aa496f284f3 Summary Malicious versions of the nx package, as well as some supporting plugin packages, were published to npm, containing code that scans the file...

Embeded Malicious Code

Overview @nx/devkit is an AI-first build platform that connects everything from your editor to CI. Helping you deliver fast, without breaking things. This package contains a set of utilities for creating Nx plugins. Affected versions of this package are vulnerable to Embeded Malicious Code throug...

MAL-2025-6901 Malicious code in @angular_devkit/build_angular (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @angular_devkit/build_angular (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @angular_devkit/architect (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6900 Malicious code in @angular_devkit/architect (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @angular_devkit/build-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 053dbd5b72c824b5644482986fcc9a5caca48fcbe447f90f957e420418f2bcb4 The OpenSSF Package Analysis project identified '@angulardevkit/build-webpack' @ 99.1.1 npm as malicious. It is considered malicious because: -...

MAL-2025-6870 Malicious code in @angular_devkit/build-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 053dbd5b72c824b5644482986fcc9a5caca48fcbe447f90f957e420418f2bcb4 The OpenSSF Package Analysis project identified '@angulardevkit/build-webpack' @ 99.1.1 npm as malicious. It is considered malicious because: -...

Malicious code in @angular_devkit/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e71b8ecbb1a24ad2e952dddfe831edc984a60be61de846d61903baae55b376bc The OpenSSF Package Analysis project identified '@angulardevkit/core' @ 99.1.1 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-6869 Malicious code in @angular_devkit/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e71b8ecbb1a24ad2e952dddfe831edc984a60be61de846d61903baae55b376bc The OpenSSF Package Analysis project identified '@angulardevkit/core' @ 99.1.1 npm as malicious. It is considered malicious because: - The packa...

Malicious code in teaspoon-devkit (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5146 Malicious code in teaspoon-devkit (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

@angular-devkit/build-angular (>=19.2.0-next.2, <=19.2.0), @angular/build (>=19.2.0-next.2, <=19.2.0) +41 more potentially affected by CVE-2025-31125 via vite (>=6.1.0, <=6.1.2)

vite NPM version =6.1.0, =19.2.0-next.2, =19.2.0-next.2, =1.0.7, =2.12.0, =2.12.0, =11.24.0, =0.0.1739797164641, =1.0.0, =0.0.0-experimental-989cf02-20250217-d62ba1cb, =0.0.0-experimental-0580205-20250209-2be35102, =0.0.0-snapshot-08bd566ea55152626f488c12d32ebce7e35b812d,...

java-21-openjdk security update for RHEL 8.10, 9.4 and 9.5

1:21.0.6.0.7-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.6.0.7-1 - Update to jdk-21.0.6+7 GA - Update release notes to 21.0.6+7 - Sync the copy of the portable & devkit specfiles with the latest update - Include the latest devkit patches - Update README.md to list an easier way of...

MAL-2025-179 Malicious code in dds-js-devkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e0db7ac7daeb916d2610c7e857e635a24cecf8264c32d39366fc297fcda631d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dds-js-devkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e0db7ac7daeb916d2610c7e857e635a24cecf8264c32d39366fc297fcda631d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@angular-devkit/build-angular (>=18.0.0-next.0, <=18.1.0-next.2), @angular/build (>=18.0.0-next.3, <=18.1.0-next.2) +99 more potentially affected by CVE-2024-45812 via vite (>=5.2.0, <=5.2.13)

vite NPM version =5.2.0, =18.0.0-next.0, =18.0.0-next.3, =0.36.1-fix1, =0.21.1, =1.0.375, =1.1.0, =5.0.0-alpha.4, =0.1.0-rc.8, =0.0.3, =0.0.22, =18.0.0-next.1, =18.0.0-next.1, =3.0.2, =3.2.12 and more Source cves: CVE-2024-45812 Source advisory: MEND:CVE-2024-45812...

@angular-devkit/build-angular (>=18.1.0-next.3, <=18.2.0-rc.0), @angular/build (>=18.1.0-next.3, <=18.2.0-rc.0) +44 more potentially affected by CVE-2024-45812 via vite (>=5.3.0, <=5.3.5)

vite NPM version =5.3.0, =18.1.0-next.3, =18.1.0-next.3, =2.0.0-beta.3, =0.44.0, =5.0.0-alpha.11, =18.1.0-snapshot-1721253261323, =18.1.0-snapshot-1721253261323, =1.0.1, =11.17.8, =0.0.1, =14.190.0-FUI-2012.1, =14.190.0-FUI-2012.1, =0.0.1719809477737, =8.1.1, =8.5.5 - @hybrbase-front/cli 1.0.0 an...