43286 matches found
Malicious Package
Overview chai-status is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
Malicious code in ui-cluster-driver-otccce (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4e0c2fa1483c63a547be16744188b63b2c41acb5704b081cd0cdc46b570458 The package ui-cluster-driver-otccce was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview ddos-l7 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in ddos-l7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0820d1cfcceb97e14d10335c631de12d5974fe1617474c94a09055a982607c8 The package ddos-l7 was found to contain malicious code. Source: ghsa-malware 35f98f327ff2e7b3a2558a70bc1b22fd31196c2c76b242645df4bd9c03e1e1ec Any...
Malicious Package
Overview react-animated-glow is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview @kiwiiw/ez-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-191554 Malicious code in tensorfi-secure-hash (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a1f3633d2738b3112eae340090cc5ca67f6847ed89ade9de6c8448b591c20b The package tensorfi-secure-hash was found to contain malicious code. Source: ghsa-malware...
Malicious code in stream-xor-chain (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5f6f6ecd6b8dc9aa3f0b220d7281e20d4cdb8d668fad3b2eaf3d574b5c1803 The package stream-xor-chain was found to contain malicious code. Source: ghsa-malware 5fa72b796385b0370be584212f5220a4a6e6960e840a4e700b2df2f99e7be1...
Malicious Package
Overview stream-xor-chain is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in tdspt-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7e9f891a48c1bea4bde6673484ff604dfe90e6e99972469417fbec69d0eac4 The package tdspt-helper was found to contain malicious code. Source: ghsa-malware b3fbe7c3c4241a699aa4e7bcd9abdaf9fdb9f37eb27d178e235db8f5ee4402a2 A...
Malicious code in nodenetbanxsdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d713c278d17ee8b13193f95b612afbe466e885e58f6cab96ccc1ce764b9d7e27 The package nodenetbanxsdk was found to contain malicious code. Source: ghsa-malware d369a1b27a2dd8b6f16340c943462366dc30c2e54cf93cc4697c498c646d061d...
Malicious Package
Overview nodenetbanxsdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-191541 Malicious code in bignumx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745b8508e8818e81e53f71cf2467fa31620191825b820f424eb9f86ab1e5f49e The package bignumx was found to contain malicious code. Source: ghsa-malware 98b45b53c91ebee4c77ebf3ba359608318ce17878eb8edb1cbd2a7e65238dbff Any...
Malicious Package
Overview cyber-fca is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
CVE-2025-59703
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the...
CVE-2025-59703
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the...
CVE-2025-59703
Entrust nShield Connect XC, nShield 5c, and nShield HSMi (through 13.6.11 or 13.7) are affected by CVE-2025-59703. A physically proximate attacker can access internal components of the appliance without tamper-evidence by removing the tamper label and all fixing screws—an F14 attack. The descript...
PT-2025-48706
Name of the Vulnerable Software and Affected Versions Entrust nShield Connect XC versions through 13.6.11 Entrust nShield 5c versions through 13.6.11 Entrust nShield HSMi versions through 13.6.11 Entrust nShield Connect XC version 13.7 Entrust nShield 5c version 13.7 Entrust nShield HSMi version...
openSUSE 16 Security Update : dovecot24 (openSUSE-SU-2025-20113-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025-20113-1 advisory. - Update dovecot to 2.4.2: - CVE-2025-30189: Fixed users cached with same cache key when auth cache was enabled bsc1252839 - Changes - auth: Remove...
Privilege Context Switching Error
Overview Affected versions of this package are vulnerable to Privilege Context Switching Error in the current user session. An attacker can remove comments created by other users by sending crafted requests with insufficient permission checks. Remediation Upgrade...