Malicious code in vite-jsconfig-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa2206f03805567e12ada7cbae343d47492532958d8f685e73562fee9972b3b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4529 Malicious code in jwt-audit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53e6fefcdc9ad0aef91f34767bdce289240d2c62fe34698883f251d54360dc69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel security update

4.18.0-553.54.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

MAL-2025-4512 Malicious code in super-randomizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a7beb67969c60a902fa65a47d6bd880c7de7d3d731f2cc6362efeddf2849ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4500 Malicious code in resize-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfd42601e27c2460acacb70b9c49d0443b44d78395d43a6b2491f24becdc1855 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Microsoft 3D Viewer (Windows SMB Login)

SMB login-based detection of Microsoft 3D Viewer. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7534-1 flask vulnerability

It was discovered that Flask incorrectly handled key rotation. An attacker could possibly use this issue to sign sessions with stale keys...

MAL-2025-4573 Malicious code in nuget-trends (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e15d8438aa8bc3250a81a056153ed3922c2857a17e24e289a90822ae2362acfa Any computer that has this package installed or running should be considered...

MAL-2025-4577 Malicious code in reacts-gh (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f438d6df955eb639b0090cb670175f993ce6f6e5ce1f8d1926d236447864460 Any computer that has this package installed or running should be considered...

MAL-2025-4460 Malicious code in winstons-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7ebc9796eae3ab4eb7380710ff205e061c750965207974c71dba9f0d8d2ae8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4435 Malicious code in expo-firestore-upload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 265b76b510b5a24dcbc9d26be8211555349249589a6468e756c32680aebda977 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4434 Malicious code in expo-blob-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a5aeaddd3e10a478c22aad8b7c9c33e937d34c05df63b23d331e509b44028c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4454 Malicious code in vite-plugin-legacy-umd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50f69beef84f7a73cac44491396fbfc4bd7564cf1f9c4b3c47ea608b77288c8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4458 Malicious code in webmaker-sso (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1b71ddc7d061c8f7256f365a12a3d960f2fd6da0118ad1bc039beefa8387d9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4452 Malicious code in vega-embed-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7c87f1683f40878cd29b73e1cdd93c106e07459ed60c1404af7f80af25853e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora: Security Advisory (FEDORA-2025-140200b18d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-f050ec7d1b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-b92313b6f2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-945226bee4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-2394

Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service OSS, leading to sensitive data disclosure...