Malicious code in @vietmoney/vietmoneywork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59799baf7b8c7f94f2f2f6f4a87cfa9efbb6c8e4f480d2d234ed88264f6aed6b The package @vietmoney/vietmoneywork was found to contain malicious code. Source: ghsa-malware...

MAL-2025-193005 Malicious code in landingpage-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d33042e8f056ce06ca8931599f3a0d11547dd6a7d11d2f74ecc0140bd247533 The package landingpage-service was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vietmoney/react-native-smart-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7789664c2f8f3999c2d9294a538cac5a4ae536b37159d9246a6aa2ac4e2c0b3f The package @vietmoney/react-native-smart-page was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vietmoney/react-native-htmlview (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82606664e32d7050a729171d5dac24f54950e90b7259a7f90a582e94632fcc61 The package @vietmoney/react-native-htmlview was found to contain malicious code. Source: ghsa-malware...

MAL-2025-193002 Malicious code in @vietmoney/react-native-vnpay-merchant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db7aa9187bf0ea16a7e5209406b93cd1b253b087a17bac46ad5cf79b8fa317f3 The package @vietmoney/react-native-vnpay-merchant was found to contain malicious code. Source: ghsa-malware...

RustFS has a gRPC Hardcoded Token Authentication Bypass

Vulnerability Overview Description RustFS implements gRPC authentication using a hardcoded static token "rustfs rpc" that is: 1. Publicly exposed in the source code repository 2. Hardcoded on both client and server sides 3. Non-configurable with no mechanism for token rotation 4. Universally vali...

OPENSUSE-SU-2025:20155-1 Security update for exim

This update for exim fixes the following issues: - CVE-2025-53881: Fixed a potential security issue with logfile rotation bsc1246457...

MAL-2025-192988 Malicious code in yellowdiscordlookup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a458f47de1b6a86fa1139c7fa7def7c0035d181b6db01d635374e0e6058893a9 The package yellowdiscordlookup was found to contain malicious code. Source: ghsa-malware...

Malicious code in portal-lise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd0c023f6f7e2ba4df069103ad42d8cb03575410033a50f5887ec1d0fbe94205 The package portal-lise was found to contain malicious code. Source: ghsa-malware 6d0ea4511808b283817242b827687f9a2fb37a0a7f17db46db1f4acbd6ba0de8 An...

MAL-2025-192966 Malicious code in cdd-plugin-for-datawarrior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab7ca6ae4de6f4b1898f1507f69f89459ab40983852692e28a6b599f9e2318f The package cdd-plugin-for-datawarrior was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwindcss-typography-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f2e4636e4f08bc04591afc5b27fce2e03dea82a9883b2dc8092a6f23fa6f55d The package tailwindcss-typography-style was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192978 Malicious code in tailwindcss-typography-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f2e4636e4f08bc04591afc5b27fce2e03dea82a9883b2dc8092a6f23fa6f55d The package tailwindcss-typography-style was found to contain malicious code. Source: ghsa-malware...

Snipping the Long Tail of Shai-Hulud 2.0

Wiz Research reveals the data behind Shai-Hulud's 2.0 long tail, the massive gap in cloud credential rotation, a potential link to the Trust Wallet incident, and how we finally "snipped the tail" on a month of ongoing infections...

MAL-2026-170 Malicious code in secguest-react-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76ab99d9a667e9700bb0176dde546ff3748b742775ea322766035a730391891 The package secguest-react-lib was found to contain malicious code. Source: ghsa-malware...

Malicious code in supply_chain_dummy_test_2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3f5fef388376bf388c291f40ce96d8431d31f38fb29b6f69b6543408d9ef2f The package supplychaindummytest2 was found to contain malicious code. Source: ghsa-malware...

Malicious code in dotjsenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199e0e242516cf235f3d4f4d7b7921f7b52573e674bd76da515939782a81c153 The package dotjsenv was found to contain malicious code. Source: ghsa-malware b4dd239728dde802ec7a7aadd85d2a9f1c5c3e8b83e5f19b92a2afab16d1cd1c Any...

Malicious code in start-log-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5bc70fc220a38dd997887f438e9a6d5afb70cf1d30dd8b95a664e013a7309e The package start-log-plugin was found to contain malicious code. Source: ghsa-malware 3ef7e02e352e8d339add82817454f490a0e4588fffb1dcafa53cc0136f4e9d...

Malicious code in qxytest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0505d10da1308ac438dd0f500c125f12d4256deda46cca7991289eee22897d53 The package qxytest1 was found to contain malicious code. Source: ghsa-malware a5c4713032b22949ba57f3363cbced03d097646105ff09ef45dec3b09d552cae Any...

Malicious code in secguest-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae83c0c9ae4ffab006e7b6d1833b54dfb5386dedf3e94dedf500b3af1dc82d1c The package secguest-lib was found to contain malicious code. Source: ghsa-malware 62ef36b4b0912fdc42b94702acf5c8e48b06cb2d3370113c3c875479aacd5e9f A...

MAL-2025-192674 Malicious code in xnetgpt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cec426261ce30ea326ac55c56aaaf04c8efc5dad86f9eecaf8a8397df70dec7 The package xnetgpt was found to contain malicious code. Source: ghsa-malware 168c69e604f23926993c52e06b6a5f4b5355d3dd935261e5aba8c5d761bb17e1 Any...