580 matches found
openSUSE 16 Security Update : pnpm (openSUSE-SU-2025-20115-1)
"The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20115-1 advisory. Changes in pnpm: - update to 10.22.0: Minor Changes - Added support for trustPolicyExclude 10164. You can now list one or more specific package...
OPENSUSE-SU-2025:20115-1 Security update for pnpm
This update for pnpm fixes the following issues: Changes in pnpm: - update to 10.22.0: Minor Changes - Added support for trustPolicyExclude 10164. You can now list one or more specific packages or versions that pnpm should allow to install, even if those packages don't satisfy the trust policy...
PT-2025-54856
This update for pnpm fixes the following issues: Changes in pnpm: - update to 10.22.0: Minor Changes - Added support for trustPolicyExclude 10164. You can now list one or more specific packages or versions that pnpm should allow to install, even if those packages don't satisfy the trust policy...
Malicious code in @gitlab-test/pnpm-v9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 352b39cbb73b3231bb6a6698230853fb58dd0313c7187e98a39dba4502226b02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview @gitlab-test/pnpm-v9 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-36794
Malicious code in @gitlab-test/pnpm-v9 npm...
MAL-2025-48967 Malicious code in @gitlab-test/pnpm-v9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 352b39cbb73b3231bb6a6698230853fb58dd0313c7187e98a39dba4502226b02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2023-2219
Malicious code in bioql PyPI...
EUVD-2022-1397
Malicious code in bioql PyPI...
EUVD-2024-3510
Malicious code in bioql PyPI...
Malicious code in pnpm_prune_lockfile_v9 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-47717 Malicious code in pnpm_prune_lockfile_v9 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in pnpm_prune_lockfile_v8 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-47716 Malicious code in pnpm_prune_lockfile_v8 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-47715 Malicious code in pnpm_lockfile_file_v9 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in pnpm_lockfile_file_v8 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in pnpm-utils (npm)
The package pnpm-utils was found to contain malicious code...
MAL-2025-29449 Malicious code in pnpm-utils (npm)
The package pnpm-utils was found to contain malicious code...
Fedora 42 : nodejs-bash-language-server / nodejs-pnpm (2025-69a1acbbc0)
The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-69a1acbbc0 advisory. Update pnpm to version 10.9.0 to fix CVE-2024-47829 and nodejs-bash-language-server to version 5.6.0 Tenable has extracted the preceding description block...
Malware in @monorepo-lens/pnpm-collector
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...