[SECURITY] Fedora 43 Update: apt-3.1.15-2.fc43

This package provides commandline tools for searching and managing as well as querying information about packages as a low-level access to all features of the libapt-pkg library. These include: apt-get for retrieval of packages and information about them from authenticated sources and for...

Malicious Package

Overview mona-speedy-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Huawei HarmonyOS/EMUI Privilege Control Vulnerability (CNVD-2026-0013753)

Huawei HarmonyOS is Huawei's self-developed distributed operating system, designed for cell phones, tablets, smart homes and other full-scene devices to achieve seamless cross-device collaboration. Huawei EMUI is Huawei's deeply customized mobile operating system based on Android. A privilege...

CVE-2025-66325

Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-66325

Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-66325

Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-66325

Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-66325

CVE-2025-66325 affects Huawei HarmonyOS/EMUI, originating from improper control of package management privileges in the package management module. The vulnerability could lead to unauthorized access affecting service confidentiality. Connected sources (CNVD/CNNVD/RH/NVD) corroborate the privilege...

EUVD-2025-201675

Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-66325

Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-66325: Undefined Security Weakness

Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Huawei EMUI and Huawei HarmonyOS security vulnerabilities

Huawei HarmonyOS is Huawei's self-developed distributed operating system, designed for cell phones, tablets, smart homes and other full-scene devices to achieve seamless cross-device collaboration. Huawei EMUI is Huawei's deeply customized mobile operating system based on Android. A privilege...

PT-2025-49532

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A permission control issue exists in the package management module. Successful exploitation could compromise service confidentiality. Recommendations At the moment, there is no information about a...

Adobe Experience Manager (AEM) CRX Package Manager Panel Detected

This plugin detects the presence of the Adobe Experience Manager AEM CRX Package Manager panel on a web application. The CRX Package Manager is a tool used to manage packages in AEM, allowing users to install, uninstall, and manage content packages. No source data...

Malicious Package

Overview @shr3k/tdspt-helper-ng is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious code in puppeteer-rocket-bioinformatics-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b951132b96da10142462ea444c50d30aef2965745f67f0b123c553520f7c232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187970 Malicious code in meissa-hermes-callisto-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b633dc83b81fa2bf2811bca79ee36d4afe31a1d5a5ca8d3cb8a5bf01364c7dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185742 Malicious code in balance-char-byte-final-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817e865ae1c8a984187cb4dbd722f2a15ab88822dc1ff846b8b0644a317fdc6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steganography-aether-on-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a82bcf9484d0efd576c49a8f70274e7b0f9d424b9ac8f7f2c024d1aa3911a92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182805 Malicious code in itale-adci-akonolki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821ce9edf45994bcd34969f68a4bf3bbdd374c5c4e3a320437b81aac48de04ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...