CLSA-2026-1776299668 TuxCare security update for io.netty (9 CVEs)

TuxCare rebuilt 42 io.netty packages to address 9 CVEs. Fixed in 4.1.58.Final-tuxcare.1...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...