1538 matches found
MAL-2025-21213 Malicious code in gatsbyimageserver (npm)
The package gatsbyimageserver was found to contain malicious code...
MAL-2025-12222 Malicious code in @zalastax/nolb-lion-libv (npm)
The package @zalastax/nolb-lion-libv was found to contain malicious code...
MAL-2025-16744 Malicious code in cgeqtowidauyhsjp (npm)
The package cgeqtowidauyhsjp was found to contain malicious code...
MAL-2025-12482 Malicious code in @zalastax/nolb-ng- (npm)
The package @zalastax/nolb-ng- was found to contain malicious code...
MAL-2025-12088 Malicious code in @zalastax/nolb-json-1 (npm)
The package @zalastax/nolb-json-1 was found to contain malicious code...
MAL-2025-11444 Malicious code in @zalastax/nolb-fii (npm)
The package @zalastax/nolb-fii was found to contain malicious code...
MAL-2025-22535 Malicious code in honey-zenith-vzw435-project (npm)
The package honey-zenith-vzw435-project was found to contain malicious code...
MAL-2025-11346 Malicious code in @zalastax/nolb-eslintb (npm)
The package @zalastax/nolb-eslintb was found to contain malicious code...
MAL-2025-15691 Malicious code in bind-key (npm)
The package bind-key was found to contain malicious code...
CVE-2025-5455 affecting package qt5-qtbase for versions less than 5.12.11-18
CVE-2025-5455 affecting package qt5-qtbase for versions less than 5.12.11-18. A patched version of the package is available...
CVE-2025-38212 affecting package kernel for versions less than 6.6.96.1-1
CVE-2025-38212 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...
CVE-2025-38332 affecting package kernel for versions less than 6.6.96.1-1
CVE-2025-38332 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...
CVE-2025-38035 affecting package kernel for versions less than 6.6.96.1-1
CVE-2025-38035 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...
MAL-2025-6775 Malicious code in undeface-test-1 (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-54956
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...
CVE-2025-54956
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...
CVE-2025-54956
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...
CVE-2025-54956
CVE-2025-54956 affects the R package gh (pre-1.5.0). The vulnerability arises when an HTTP response is constructed to include the request’s Authorization header, potentially exposing credentials. Several connected advisories confirm the issue and provide mitigations: Debian LTS DLA-4378-1 notes a...