MAL-2025-23683 Malicious code in javascript-nightmare-jekyll-postcss-loader (npm)

The package javascript-nightmare-jekyll-postcss-loader was found to contain malicious code...

MAL-2025-25176 Malicious code in less-loader-colors-nashira-docusaurus (npm)

The package less-loader-colors-nashira-docusaurus was found to contain malicious code...

MAL-2025-19269 Malicious code in ein-loader (npm)

The package ein-loader was found to contain malicious code...

MAL-2025-38782 Malicious code in warp-postcss-loader-jest-cosmicsilence (npm)

The package warp-postcss-loader-jest-cosmicsilence was found to contain malicious code...

MAL-2025-33713 Malicious code in spawn-less-loader-enif-quark (npm)

The package spawn-less-loader-enif-quark was found to contain malicious code...

MAL-2025-29314 Malicious code in pipe-css-loader-unuk-ursa (npm)

The package pipe-css-loader-unuk-ursa was found to contain malicious code...

MAL-2025-21332 Malicious code in geoarchaeology-vulcan-celeste-style-loader (npm)

The package geoarchaeology-vulcan-celeste-style-loader was found to contain malicious code...

MAL-2025-16631 Malicious code in cassini-ursa-sass-loader-stream (npm)

The package cassini-ursa-sass-loader-stream was found to contain malicious code...

MAL-2025-29540 Malicious code in postcss-loader-express-init-test (npm)

The package postcss-loader-express-init-test was found to contain malicious code...

MAL-2025-32632 Malicious code in sagitta-mongoose-gravitationalwave-postcss-loader (npm)

The package sagitta-mongoose-gravitationalwave-postcss-loader was found to contain malicious code...

MAL-2025-38450 Malicious code in virgo-got-sass-loader-spica (npm)

The package virgo-got-sass-loader-spica was found to contain malicious code...

MAL-2025-17375 Malicious code in com.unity.xrtools.module-loader (npm)

The package com.unity.xrtools.module-loader was found to contain malicious code...

MAL-2025-34370 Malicious code in tachyon-style-loader-sadr-hapi (npm)

The package tachyon-style-loader-sadr-hapi was found to contain malicious code...

CVE-2025-23304

NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering...

CVE-2025-23304

CVE-2025-23304 affects the NVIDIA NeMo library (model loading component). The vulnerability arises from loading .nemo files with maliciously crafted metadata, enabling code injection that may lead to remote code execution and data tampering. Affected: NVIDIA NeMo library (model loading). Exploita...

CVE-2025-23304

NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering...

Linux Distros Unpatched Vulnerability : CVE-2025-3549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function...

Linux Distros Unpatched Vulnerability : CVE-2016-4972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Murano before 1.0.3 liberty and 2.x before 2.0.1 mitaka, Murano-dashboard before 1.0.3 liberty and 2.x before 2.0.1 mitaka, and python-muranoclient...

CVE-2025-55009

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In versions 0.14.1 and below, @workos-inc/authkit-remix exposed sensitive authentication artifacts — specifically sealedSession and accessToken — by returning the...

CVE-2025-55008

The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router. In versions 0.6.1 and below, @workos-inc/authkit-react-router exposed sensitive authentication artifacts — specifically sealedSession and accessToken by...