GHSA-9GQJ-5W7C-VX47

creationtimestamp| type| source ---|---|--- 2025-12-04 21:37:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115663455684770927...

Malicious code in elf-stats-lanternlit-snowman-834 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5ba8a53d8eaf81612c735ecd48fa5c485199e190ba2e4047f1160d5ad1d9dc The package elf-stats-lanternlit-snowman-834 was found to contain malicious code. Source: ghsa-malware...

Malicious code in chai-test-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4f5ebd52a0912210e31f29b89e1199fadcf3bfddd5557b38e388f9b6df8315 The package chai-test-await was found to contain malicious code. Source: ghsa-malware a25b0475f84c41d68c89ffad60b4dc123876d634fbe93a793fae42da8e1112b...

GHSA-HGF8-39GV-G3F2 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter, tensorflow-gpu-jupyter, mlflow, azure-functions-python-worker, superset, localstack...

GHSA-XQ4M-MC3C-VVG3

creationtimestamp| type| source ---|---|--- 2025-12-03 18:31:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115657061255075293 2026-01-24 21:25:38+00:00| seen| https://gist.github.com/alon710/08bc69f99c8d80c7dc6a17cf64570f55 2026-01-24 22:41:02+00:00| seen|...

FreeBSD : png -- Multiple vulnerabilities (4b297f5a-cbad-11f0-ac9f-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4b297f5a-cbad-11f0-ac9f-b42e991fc52e advisory. https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g reports: LIBPNG is ...

GHSA-27M7-FFHQ-JQRM

creationtimestamp| type| source ---|---|--- 2025-12-01 23:36:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115646936118500552...

GHSA-JRHG-82W2-VVJ7

creationtimestamp| type| source ---|---|--- 2025-12-01 22:49:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115646748615003105...

GHSA-MP93-8VXR-HQQ9

creationtimestamp| type| source ---|---|--- 2025-12-01 21:07:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115646350174352459...

GHSA-5GFM-WPXJ-WJGQ vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, kubeflow-centraldashboard, jitsucom-jitsu, opensearch-dashboards, kubeflow-katib...

GHSA-69J4-GRXJ-J64P vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9...

GHSA-HXM8-VFPQ-JRFC

creationtimestamp| type| source ---|---|--- 2025-11-27 16:04:55+00:00| seen| https://seclists.org/oss-sec/2025/q4/214...

GHSA-8FRV-Q972-9RQ5

creationtimestamp| type| source ---|---|--- 2025-11-25 20:14:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115612168819994275...

GHSA-4952-H5WQ-4M42

creationtimestamp| type| source ---|---|--- 2025-11-25 14:43:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115610864814455085...

GHSA-7WV6-48J4-HJ3G

creationtimestamp| type| source ---|---|--- 2025-11-25 14:42:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115610861120739101...

Malicious code in @pruthvi21/use-debounce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd8d11cd0a3abe19ac13cfc1b3bf6a4f1388ac2c6a404090a1264d32de390e8 The package @pruthvi21/use-debounce was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/studio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eabd7c33d6759f64f573e5cc75565c4669ed790fe45d77d2756d1380b79063f The package @asyncapi/studio was found to contain malicious code. Source: ghsa-malware be3f6f1fe39d5dd5c1ee3ab702e2bee67bc36c54ded865ad25eb2504919b58...

Malicious code in react-native-worklet-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed2ae3214c7915580ec4f119fc2fc1ee0e071e2deea48ef419973982180aa9c The package react-native-worklet-functions was found to contain malicious code. Source: ghsa-malware...

Malicious code in eslint-config-zeallat-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28fe7c28614bd60fe323d92db35df502ed3c1c9076a708815031e1a78311c6e The package eslint-config-zeallat-base was found to contain malicious code. Source: ghsa-malware...

Malicious code in iron-shield-miniapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7b0e4007bb817da7fd19c6ddd7f073f585337504d8ac60541b07e162398b70 The package iron-shield-miniapp was found to contain malicious code. Source: ghsa-malware...