Malicious code in @zalastax/nolb-_go_ (npm)

The package @zalastax/nolb-go was found to contain malicious code...

Malicious code in @zalastax/nolb-go (npm)

The package @zalastax/nolb-go was found to contain malicious code...

MAL-2025-10041 Malicious code in @zalastax/nolb-_go_ (npm)

The package @zalastax/nolb-go was found to contain malicious code...

Malicious code in go-notify (npm)

The package go-notify was found to contain malicious code...

Malicious code in @zalastax/nolb-go- (npm)

The package @zalastax/nolb-go- was found to contain malicious code...

MAL-2025-39601 Malicious code in xdh-go (npm)

The package xdh-go was found to contain malicious code...

MAL-2025-11609 Malicious code in @zalastax/nolb-go- (npm)

The package @zalastax/nolb-go- was found to contain malicious code...

MAL-2025-11613 Malicious code in @zalastax/nolb-go_ (npm)

The package @zalastax/nolb-go was found to contain malicious code...

MAL-2025-21619 Malicious code in go-notify (npm)

The package go-notify was found to contain malicious code...

Malicious Package

Overview github.com/wetteepee/hcloud-ip-floater is a malicious package. This package contains malicious code designed to provide attackers with on-demand remote access to a developer's system or CI/CD environment. The package and some other variants use typosquatting to imitate legitimate package...

Malicious Package

Overview github.com/cavernouskina/mcp-go is a malicious package. This package contains malicious code designed to provide attackers with on-demand remote access to a developer's system or CI/CD environment. The package and some other variants use typosquatting to imitate legitimate packages. Upon...

Maintainers of Last Resort

Geomys is an organization of professional open source maintainers, focused on a portfolio of critical Go projects. For example, we are two thirds of the Go standard library cryptography maintainers, we provide the FIPS 140-3 validation of the upstream Go Cryptographic Module, and we fund the...

Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce

Cosmic Sting: CVE-2024-34102 Exploiter Cosmic Sting is a Go-b...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.55 security and extras update

Red Hat OpenShift Container Platform release 4.14.55 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a security impact of...

SUSE: Security Advisory (SUSE-SU-2025:02760-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:02759-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:02759-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROS-20250814-08

Vulnerability of the createInDir function of the glog library of the Golang programming language is related to errors in reference handling. reference handling errors. Exploitation of the vulnerability may allow an attacker to escalate his privileges and gain unauthorized access to protected...

OliveTin OS Command Injection vulnerability

OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the ParseRequestURI function in the arguments.go file. An attacker can execute arbitrary operating system commands by supplying crafted input to the affected process. Remediation Upgrade...