Malicious code in hash-sha256 (npm)

The package hash-sha256 was found to contain malicious code...

Malicious code in hash-spy-mock-web-sed (npm)

The package hash-spy-mock-web-sed was found to contain malicious code...

Malicious code in phi-orchestrate-cron-hash-function (npm)

The package phi-orchestrate-cron-hash-function was found to contain malicious code...

Malicious code in sudo-hash-hash-public-void (npm)

The package sudo-hash-hash-public-void was found to contain malicious code...

Malicious code in array-hash-view-balance-authenticate (npm)

The package array-hash-view-balance-authenticate was found to contain malicious code...

Malicious code in bundle-shell-hash-spy-import (npm)

The package bundle-shell-hash-spy-import was found to contain malicious code...

Malicious code in create-release-hash (npm)

The package create-release-hash was found to contain malicious code...

MAL-2025-33440 Malicious code in small-debug-awk-hash-parse (npm)

The package small-debug-awk-hash-parse was found to contain malicious code...

MAL-2025-22252 Malicious code in hash-query-string-assert-catch (npm)

The package hash-query-string-assert-catch was found to contain malicious code...

MAL-2025-22250 Malicious code in hash-bash-easy-xi-table (npm)

The package hash-bash-easy-xi-table was found to contain malicious code...

Malicious code in air-cron-moon-compress-hash (npm)

The package air-cron-moon-compress-hash was found to contain malicious code...

MAL-2025-29068 Malicious code in permission-parse-static-wind-hash (npm)

The package permission-parse-static-wind-hash was found to contain malicious code...

Malicious code in hash-query-string-assert-catch (npm)

The package hash-query-string-assert-catch was found to contain malicious code...

MAL-2025-28045 Malicious code in object-table-hash-private-enum (npm)

The package object-table-hash-private-enum was found to contain malicious code...

Malicious code in object-table-hash-private-enum (npm)

The package object-table-hash-private-enum was found to contain malicious code...

CVE-2025-54864

Hydra is a continuous integration service for Nix based projects. Prior to commit f7bda02, /api/push-github and /api/push-gitea are called by the corresponding forge without HTTP Basic authentication. Both forges do however feature HMAC signing with a secret key. Triggering an evaluation can be...

CVE-2025-42943

SAP GUI for Windows may allow the leak of NTML hashes when specific ABAP frontend services are called with UNC paths. For a successful attack, the attacker needs developer authorization in a specific Application Server ABAP to make changes in the code, and the victim needs to execute by using SAP...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-50154, CVE-2025-59214 Windows File Explorer Zero C...

Moderate: Red Hat Security Advisory: krb5 security update

An update for krb5 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

CVE-2025-51691

Cross-Site Scripting XSS vulnerability found in MarkTwo commit e3a1d3f90cce4ea9c26efcbbf3a1cbfb9dcdb298 May 2025 allows a remote attacker to execute arbitrary code via a crafted script input to the editor interface. The application does not properly sanitize user-supplied Markdown before renderin...