MAL-2025-41259 Malicious code in amp-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dacbeb50af065a576ade73d084e6ac504cb061d33ebdb8fe8d72839b926e9d59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2023-50290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables...

Linux Distros Unpatched Vulnerability : CVE-2023-52997

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: prevent potential spectre v1 gadget in ipmetricsconvert if !type continue; if type RTAXMAX return -EINVAL; ... metricstype - 1 = val; @type being used as ...

Red Teaming Methodology for Design Obfuscation

The main goal of design obfuscation schemes is to protect sensitive design details from untrusted parties in the VLSI supply chain, including but not limited to off-shore foundries and untrusted end users. In this work, we provide a systematic red teaming approach to evaluate the security of desi...

Linux Distros Unpatched Vulnerability : CVE-2021-4453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a potential gpumetricstable memory leak Memory is allocated for...

Malicious code in ac-dom-metrics (npm)

The package ac-dom-metrics was found to contain malicious code...

Malicious code in switcharoo-plugin-metrics (npm)

The package switcharoo-plugin-metrics was found to contain malicious code...

MAL-2025-24521 Malicious code in kindle-fast-metrics-javascript-sdk (npm)

The package kindle-fast-metrics-javascript-sdk was found to contain malicious code...

MAL-2025-34298 Malicious code in switcharoo-plugin-metrics (npm)

The package switcharoo-plugin-metrics was found to contain malicious code...

Malicious code in kindle-fast-metrics-javascript-sdk (npm)

The package kindle-fast-metrics-javascript-sdk was found to contain malicious code...

Malicious code in reddit-mobile-plugin-metrics (npm)

The package reddit-mobile-plugin-metrics was found to contain malicious code...

MAL-2025-13966 Malicious code in ac-dom-metrics (npm)

The package ac-dom-metrics was found to contain malicious code...

MAL-2025-33149 Malicious code in shopify_metrics (npm)

The package shopifymetrics was found to contain malicious code...

CVE-2025-54800 Hydra persistent XSS in build metrics

Hydra is a continuous integration service for Nix based projects. Prior to commit dea1e16, a malicious package can introduce arbitrary JavaScript code into the Hydra database that is automatically evaluated in a client's browser when anyone visits the build page. This could be done by a third-par...

CVE-2025-54800 Hydra persistent XSS in build metrics

Hydra is a continuous integration service for Nix based projects. Prior to commit dea1e16, a malicious package can introduce arbitrary JavaScript code into the Hydra database that is automatically evaluated in a client's browser when anyone visits the build page. This could be done by a third-par...

Visualize Security Success with the Security Summary Dashboard

...

CVE-2025-47907 vulnerabilities

Vulnerabilities for packages: atlantis, nri-postgresql, amass, gh, crossplane-provider-azure-managedidentity, migrate, overmind, ratify, pguser, cerbos, nri-discovery-kubernetes, spegel, kubecolor, containerd, witness, step-issuer, steampipe, hugo-extended, kaf, redka, hubble,...

[SECURITY] Fedora 41 Update: perl-Devel-Cover-1.44-6.fc41

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...

Linux Distros Unpatched Vulnerability : CVE-2025-6192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Metrics in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

MALRIS: Malicious Hardware in RIS-Assisted Wireless Communications

Reconfigurable intelligent surfaces RIS enhance wireless communication by dynamically shaping the propagation environment, but their integration introduces hardware-level security risks. This paper presents the concept of Malicious RIS MALRIS, where compromised components behave adversarially, ev...