MAL-2025-46917 Malicious code in monolith-twirp-snippy-snippy (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 48e4b752eb90b82df41239d8194646b9ab47b4e9e147dae4011c665a05d776b0 The OpenSSF Package Analysis project identified 'monolith-twirp-snippy-snippy' @ 1.0.4 rubygems as malicious. It is considered malicious because...

MAL-2025-46916 Malicious code in monolith-twirp-registrymetadata-core (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9126904a0142c25fc3bffb7bb0d13eb5497f64bd39d2006b73cd1b6376fe2544 The OpenSSF Package Analysis project identified 'monolith-twirp-registrymetadata-core' @ 1.14.3 rubygems as malicious. It is considered maliciou...

Malicious code in monolith-twirp-proxima-enterprisemanagement (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2565ee1140267bcec7b5665365d0e0ed3dcebad8035fdbf833423af04aeb7f86 The OpenSSF Package Analysis project identified 'monolith-twirp-proxima-enterprisemanagement' @ 1.2.3 rubygems as malicious. It is considered...

Malicious code in monolith-twirp-trusttiers-trusttier (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19041d396a96e8d46b2fd05aa6e0b2f4f1e355f01a98bd0e7a3fbc513a6f09a7 The OpenSSF Package Analysis project identified 'monolith-twirp-trusttiers-trusttier' @ 1.0.3 rubygems as malicious. It is considered malicious...

MAL-2025-46915 Malicious code in monolith-twirp-proxima-enterprisemanagement (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2565ee1140267bcec7b5665365d0e0ed3dcebad8035fdbf833423af04aeb7f86 The OpenSSF Package Analysis project identified 'monolith-twirp-proxima-enterprisemanagement' @ 1.2.3 rubygems as malicious. It is considered...

MAL-2025-46918 Malicious code in monolith-twirp-trusttiers-trusttier (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19041d396a96e8d46b2fd05aa6e0b2f4f1e355f01a98bd0e7a3fbc513a6f09a7 The OpenSSF Package Analysis project identified 'monolith-twirp-trusttiers-trusttier' @ 1.0.3 rubygems as malicious. It is considered malicious...

MAL-2025-46913 Malicious code in monolith-twirp-notifications-notifyd (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 839538184262ac542c8ff20a2f5c8e1de29137acee4cf16ae1310f8856960426 The OpenSSF Package Analysis project identified 'monolith-twirp-notifications-notifyd' @ 1.2.8 rubygems as malicious. It is considered malicious...

Malicious code in monolith-twirp-notifications-notifyd (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 839538184262ac542c8ff20a2f5c8e1de29137acee4cf16ae1310f8856960426 The OpenSSF Package Analysis project identified 'monolith-twirp-notifications-notifyd' @ 1.2.8 rubygems as malicious. It is considered malicious...

Malicious code in monolith-twirp-octoshift-migrations (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c8938887f6cff7780099f00ec00251da4904659f59fb9c197583288fc8951c4 The OpenSSF Package Analysis project identified 'monolith-twirp-octoshift-migrations' @ 1.8.0 rubygems as malicious. It is considered malicious...

MAL-2025-46914 Malicious code in monolith-twirp-octoshift-migrations (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c8938887f6cff7780099f00ec00251da4904659f59fb9c197583288fc8951c4 The OpenSSF Package Analysis project identified 'monolith-twirp-octoshift-migrations' @ 1.8.0 rubygems as malicious. It is considered malicious...

@ts3d-hoops/web-viewer (>=2026.5.0, <=2026.6.0), @ts3d-hoops/web-viewer-components (>=2026.5.0, <=2026.6.0) +5 more potentially affected by CVE-2025-25977 via canvg (4.0.1)

canvg NPM version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on canvg and may be impacted: - @ts3d-hoops/web-viewer =2026.5.0, =2026.5.0, =2026.5.0, =2026.5.0, =0.1.3, =1.22.9-beta.0, =1.0.9, =3.0.9 Source cves: CVE-2025-25977 Source advisory:...

MAL-2024-11637 Malicious code in monoliht (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b0594d4897f61df4c3fce7993c0b5070f13b76f785a7a964bff40e65b566bfd5 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-11635 Malicious code in mnolith (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 207bbf082f73c1f6a049ee32f8cc0c74e31ea20c858caf879db53107132b9c4d A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-11636 Malicious code in monlith (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c423d177eb7d657790fd0c5f11e9b9c477e1df45c19c5d798ba9ddec607129a9 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

This Week in Spring - March 5th, 2024

Hi, Spring fans! Welcome to another exciting roundup of This Week in Spring! I expect many of you are reading this for the first time, especially with Facebook and Instagram being down. People have been exploring all the other lesser-known corners of the web, looking for their daily "doom scroll....

Monolith Versus Microservices: Weigh the Pros and Cons of Both Configs

...

Unleash Spring apps in a flex environment with Azure Spring Apps Consumption and Dedicated plans

In March, we introduced the Consumption pricing plan for Azure Spring Apps allowing you to start from zero and scale to zero vCPU. Today, we are thrilled to announce the public preview of the Standard Dedicated plan! The Standard Dedicated plan provides a fully managed, dedicated environment for...

Micro Frontend Framework Guide: Adaptability for Teams

It’s not you, it’s me. Why breaking up your monolith is the best course of action to design and deploy scalable web apps...

Lithtech Engine Memory Corruption Vulnerability

No description provided by source. Original Advisory: http://aluigi.org/adv/fearless-adv.txt Luigi Auriemma Application: Lithtech engine http://www.lithtech.com Games: any game should be affected, refer to http://en.wikipedia.org/wiki/LithtechLithtechimplementations those personally tested by me...

Monolith Lithtech Game Engine - Memory Corruption

Monolith Lithtech Game Engine - Memory Corruption source: https://www.securityfocus.com/bid/41851/info Monolith Lithtech Game Engine is prone to a memory-corruption vulnerability. An attacker can exploit this issue to cause a denial-of-service condition, or execute arbitrary code within the conte...