Malicious code in react-svg-supporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf2d6b643ae6f9563baf5e18621fe86ff8f764a2254785e2300c96aa397a0bc The package react-svg-supporter was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192307 Malicious code in jsonify-settings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4542f68b7757f5b53642bfaa0e9904aa7fd388338cb001d9e7911b90641a909f The package jsonify-settings was found to contain malicious code. Source: ghsa-malware 286d141ff650d5b4b60b7ad344ea4c0f5b4c3326cf6e7ce1c5e1de74c53094...

Malicious code in node-dpapi1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a892f37c5be6dceac9cda541ce52d7dc4456d98acbfaa7d2a1e530d181567e29 The package node-dpapi1 was found to contain malicious code. Source: ghsa-malware 96a0f4f04fbe21b39cfa4fe8473fc5394bcecce0f814fcba5f89d6f6217e523d An...

Malicious code in module-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17f403951ae366e78ffa76ef093fdbeb3bd4fa3de3b9753c8d7b56fea6bede2 The package module-listener was found to contain malicious code. Source: ghsa-malware c922f84811ce200feff2b048957a9b81b6e78d33db6abc439c1ce9ef7a0950a...

MAL-2025-192309 Malicious code in node-dpapi1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a892f37c5be6dceac9cda541ce52d7dc4456d98acbfaa7d2a1e530d181567e29 The package node-dpapi1 was found to contain malicious code. Source: ghsa-malware 96a0f4f04fbe21b39cfa4fe8473fc5394bcecce0f814fcba5f89d6f6217e523d An...

Malicious code in node-tailwind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33ff6b33caa8bdc3ee6c472bd1b239208b9fe59a85eecb30c997603310a8839 The package node-tailwind was found to contain malicious code. Source: ghsa-malware 81db0310d2ba64ce743a9bcf517fc3564612f97078d7b41ada94923aea6f8e4a...

UBUNTU-CVE-2025-40253

In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Fix double-kfree The function 'mpcrcvdsweepreqmpcginfo' is called conditionally from function 'ctcmpcunpackskb'. It frees passed mpcginfo. After that a call to function 'kfree' in function 'ctcmpcunpackskb' frees it...

CVE-2025-40259

CVE-2025-40259 : In the Linux kernel, the sg (SCSI generic) driver could sleep in atomic context via sg_finish_rem_req() -> blk_rq_unmap_user(). The fix calls sg_finish_rem_req() with interrupts enabled to prevent sleeping in atomic context. Multiple advisories (Debian DLA-4436-1; Amazon Linux...

DEBIAN-CVE-2025-40219

In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Fix race between SR-IOV enable/disable and hotplug Commit 05703271c3cd "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" tried to fix a race between the VF removal inside sriovdelvfs and concurrent...

CVE-2025-40219 PCI/IOV: Fix race between SR-IOV enable/disable and hotplug

In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Fix race between SR-IOV enable/disable and hotplug Commit 05703271c3cd "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" tried to fix a race between the VF removal inside sriovdelvfs and concurrent...

CVE-2025-40219

CVE-2025-40219 concerns the Linux kernel SR-IOV PCI handling. The vulnerability stems from missing serialization locks around SR-IOV VF removal/enabling: sriov_disable() could remove VF PCI devices without holding the global PCI rescan-remove lock, risking double-remove/list corruption (notably o...

kernel: md-raid10: fix KASAN warning

In the Linux kernel, the following vulnerability has been resolved: md-raid10: fix KASAN warning There's a KASAN warning in raid10removedisk when running the lvm test lvconvert-raid-reshape.sh. We fix this warning by verifying that the value "number" is valid. BUG: KASAN: slab-out-of-bounds in...

CLSA-2025-1764847045 jackson-annotations: Fix of CVE-2025-52999

Rebuilt with the CVE-2025-52999: fixed jackson-core version - Fixed build: removed unavailable jackson-parent dependencies...

Malicious code in elf-stats-lanternlit-snowman-834 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5ba8a53d8eaf81612c735ecd48fa5c485199e190ba2e4047f1160d5ad1d9dc The package elf-stats-lanternlit-snowman-834 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192298 Malicious code in elf-stats-candlelit-marshmallow-663 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cf5bd84066a57d6f168967adc62dd26c49c4095817e6db922dc357f63f824e The package elf-stats-candlelit-marshmallow-663 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-bright-cocoa-293 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0977b2c356749420c94387d2037758a63eca2cf223b813843e975652cdc9a2d3 The package elf-stats-bright-cocoa-293 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192300 Malicious code in elf-stats-marzipan-cocoa-562 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5eef2a7b97397b3b317b2e74da3cf23e6c43147a144bed8c3fbcbb35ca6249f The package elf-stats-marzipan-cocoa-562 was found to contain malicious code. Source: ghsa-malware...

Malicious code in beep-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fb7d61c321c68fa3a32e4203e38cb8655096fa5022defb8a301465b6175111 The package beep-types was found to contain malicious code. Source: ghsa-malware 66ecb0f8992d72a62cefb71f46fb521f18db115c524a498cddbe82d3e98539ca Any...

MAL-2025-192299 Malicious code in elf-stats-lanternlit-snowman-834 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5ba8a53d8eaf81612c735ecd48fa5c485199e190ba2e4047f1160d5ad1d9dc The package elf-stats-lanternlit-snowman-834 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192296 Malicious code in beep-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fb7d61c321c68fa3a32e4203e38cb8655096fa5022defb8a301465b6175111 The package beep-types was found to contain malicious code. Source: ghsa-malware 66ecb0f8992d72a62cefb71f46fb521f18db115c524a498cddbe82d3e98539ca Any...