50 matches found
DEBIAN-CVE-2026-64301
In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: fix ofnode refcount leak in scmiregulatorprobe scmiregulatorprobe calls offindnodebyname which takes a reference on the returned device node. On the error path where processscmiregulatorofnode fails, the function...
Malicious Package
Overview @pcldpvkoewpogw/testhacker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
PYSEC-2026-2 Two litellm versions published containing credential harvesting malware
After an API Token exposure from an exploited Trivy dependency, two new releases of litellm were uploaded to PyPI containing automatically activated malware, harvesting sensitive credentials and files, and exfiltrating to a remote API. The malicious code runs during importing any module from the...
DEBIAN-CVE-2026-4693
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...
Malicious Package
Overview chai-as-constrained is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-191567 Malicious code in chai-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58d95adcd5fd2dce29ac379c47d6b4ca7239ae5d1eb53d06617067cc7623938 The package chai-sync was found to contain malicious code...
EUVD-2025-149206
Malicious code in teagood-nalikoli50 npm...
Linux Distros Unpatched Vulnerability : CVE-2023-49092
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information about the private key is leaked through...
MAL-2025-10289 Malicious code in @zalastax/nolb-_or- (npm)
The package @zalastax/nolb-or- was found to contain malicious code...
MAL-2025-10747 Malicious code in @zalastax/nolb-axl (npm)
The package @zalastax/nolb-axl was found to contain malicious code...
MAL-2025-13232 Malicious code in @zalastax/nolb-poso (npm)
The package @zalastax/nolb-poso was found to contain malicious code...
MAL-2025-11125 Malicious code in @zalastax/nolb-demd (npm)
The package @zalastax/nolb-demd was found to contain malicious code...
MAL-2025-11276 Malicious code in @zalastax/nolb-elementi (npm)
The package @zalastax/nolb-elementi was found to contain malicious code...
MAL-2025-10301 Malicious code in @zalastax/nolb-_p0 (npm)
The package @zalastax/nolb-p0 was found to contain malicious code...
MAL-2025-15653 Malicious code in bh-elements (npm)
The package bh-elements was found to contain malicious code...
MAL-2025-19569 Malicious code in ember-qt0xk-mw6hu-glow-project (npm)
The package ember-qt0xk-mw6hu-glow-project was found to contain malicious code...
MAL-2025-26934 Malicious code in mw-eslint-rules (npm)
The package mw-eslint-rules was found to contain malicious code...
MAL-2025-10275 Malicious code in @zalastax/nolb-_nox (npm)
The package @zalastax/nolb-nox was found to contain malicious code...