OESA-2025-2020 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: CVE-2025-7039...

Malicious code in @epc-libraries/driver-plan-db (npm)

The package @epc-libraries/driver-plan-db was found to contain malicious code...

Malicious code in sunruse-influx-libraries (npm)

The package sunruse-influx-libraries was found to contain malicious code...

MAL-2025-17429 Malicious code in common-node-libraries (npm)

The package common-node-libraries was found to contain malicious code...

Malicious code in ysb-ui-libraries (npm)

The package ysb-ui-libraries was found to contain malicious code...

MAL-2025-9330 Malicious code in @solana-libs/check-balance (npm)

The package @solana-libs/check-balance was found to contain malicious code...

MAL-2025-34179 Malicious code in sunruse-influx-libraries (npm)

The package sunruse-influx-libraries was found to contain malicious code...

Malicious code in @epc-libraries/common-api-responses (npm)

The package @epc-libraries/common-api-responses was found to contain malicious code...

Malicious code in common-node-libraries (npm)

The package common-node-libraries was found to contain malicious code...

Malicious code in npm-eurostar-libs (npm)

The package npm-eurostar-libs was found to contain malicious code...

Malicious code in @solana-libs/check-balance (npm)

The package @solana-libs/check-balance was found to contain malicious code...

Malicious code in @epc-libraries/common-types (npm)

The package @epc-libraries/common-types was found to contain malicious code...

MAL-2025-40632 Malicious code in ysb-ui-libraries (npm)

The package ysb-ui-libraries was found to contain malicious code...

MAL-2025-27830 Malicious code in npm-eurostar-libs (npm)

The package npm-eurostar-libs was found to contain malicious code...

CVE-2025-24302

Uncontrolled recursion for some TinyCBOR libraries maintained by IntelR before version 0.6.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Malicious Package

Overview naya-clone is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate legitimate WhatsApp libraries, there is no connection between that organization and this package...

Malicious Package

Overview node-smsk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate legitimate WhatsApp libraries, there is no connection between that organization and this package...

Malicious Package

Overview nvlore-hsc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate legitimate WhatsApp libraries, there is no connection between that organization and this package...

Malicious Package

Overview @veryflore/disc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate legitimate WhatsApp libraries, there is no connection between that organization and this...

Malicious Package

Overview naya-flore is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate legitimate WhatsApp libraries, there is no connection between that organization and this package...