MAL-2025-190519 Malicious code in node-calculator-fc9a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce72f3b9dbb5fb52c5ed5de8bb398997497c2d706ce237f5062960eb66341fc The package node-calculator-fc9a was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in node-calculator-0f50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cd604b28cb577df0057a572f81e0fbda0029eb9017abcdea709811fefbc3d7 The package node-calculator-0f50 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190516 Malicious code in node-calculator-0f50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cd604b28cb577df0057a572f81e0fbda0029eb9017abcdea709811fefbc3d7 The package node-calculator-0f50 was found to contain malicious code. Source: ghsa-malware...

Malicious code in node-calculator-f4d5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342de6f4f54c5a0a4df856c6dc87100b08337f11e82519b0cc2e99c90b26c9f0 The package node-calculator-f4d5 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190515 Malicious code in node-calculator-f4d5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342de6f4f54c5a0a4df856c6dc87100b08337f11e82519b0cc2e99c90b26c9f0 The package node-calculator-f4d5 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in node-calculator-6a88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3d08012b0edb7ff8014e7fd9d38b051af2d415bc1d506a474477a85d62eaf0 The package node-calculator-6a88 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190514 Malicious code in node-calculator-6a88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3d08012b0edb7ff8014e7fd9d38b051af2d415bc1d506a474477a85d62eaf0 The package node-calculator-6a88 was found to contain malicious code. Source: ossf-package-analysis...

python-kdcproxy: Unauthenticated SSRF via Realm‑Controlled DNS SRV

If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name. This creates a server-side request forgery vulnerability, since an attacker could send a request f...

Alibaba Cloud Linux 3 : 0180: idm:DL1 (ALINUX3-SA-2025:0180)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0180 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-59088: If kdcproxy receives a...

Malicious code in com.mixpanel.unity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a617ed7539b6703818676ef051a6c12331b0e014026d1b56fb7d72775d7ad5a1 The package com.mixpanel.unity was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190500 Malicious code in com.mixpanel.unity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a617ed7539b6703818676ef051a6c12331b0e014026d1b56fb7d72775d7ad5a1 The package com.mixpanel.unity was found to contain malicious code. Source: ossf-package-analysis...

[SECURITY] Fedora 42 Update: bind9-next-9.21.14-2.fc42

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Fedora 42 : bind9-next (2025-d9f9394ecd)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d9f9394ecd advisory. Update to 9.21.14 rhbz2394406 Security Fixes: - DNSSEC validation fails if matching but invalid DNSKEY is found. CVE-2025-8677 - Address various...

MAL-2025-190499 Malicious code in filifecycleserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f108c68df2e2b35511f57d14d387ae5fe27a28b440bcbcd2e7b55bf30b8cd6f The package filifecycleserv-paypal was found to contain malicious code. Source: ghsa-malware...

Malicious code in filifecycleserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f108c68df2e2b35511f57d14d387ae5fe27a28b440bcbcd2e7b55bf30b8cd6f The package filifecycleserv-paypal was found to contain malicious code. Source: ghsa-malware...

CVE-2025-13033 Nodemailer: nodemailer: email to an unintended domain can occur due to interpretation conflict

A vulnerability was identified in the email parsing library due to improper handling of specially formatted recipient email addresses. An attacker can exploit this flaw by crafting a recipient address that embeds an external address within quotes. This causes the application to misdirect the emai...

Security update for bind

This update for bind fixes the following issues: CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found bsc1252378. CVE-2025-40778: Address various spoofing attacks bsc1252379. CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator bsc1252380. Patch...

SUSE-SU-2025:4110-1 Security update for bind

This update for bind fixes the following issues: - CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found bsc1252378. - CVE-2025-40778: Address various spoofing attacks bsc1252379. - CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator bsc1252380...

OESA-2025-2687 unbound security update

Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most...

OESA-2025-2653 bind security update

Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server. Security Fixes: Under...