MAL-2025-33669 Malicious code in sorbet-runtime-stub (npm)

The package sorbet-runtime-stub was found to contain malicious code...

MAL-2025-17322 Malicious code in com.microsoft.azure.object-anchors.runtime (npm)

The package com.microsoft.azure.object-anchors.runtime was found to contain malicious code...

MAL-2025-36837 Malicious code in thread-reject-runtime-quick-rain (npm)

The package thread-reject-runtime-quick-rain was found to contain malicious code...

MAL-2025-15596 Malicious code in benchmark-epsilon-runtime-authenticate-slow (npm)

The package benchmark-epsilon-runtime-authenticate-slow was found to contain malicious code...

MAL-2025-32041 Malicious code in reject-sun-deserialize-runtime-emulate (npm)

The package reject-sun-deserialize-runtime-emulate was found to contain malicious code...

MAL-2025-20130 Malicious code in fabalous-runtime-web (npm)

The package fabalous-runtime-web was found to contain malicious code...

MAL-2025-17169 Malicious code in cloud-runtime-authorization (npm)

The package cloud-runtime-authorization was found to contain malicious code...

Malicious code in decorator-runtime-advance (npm)

The package decorator-runtime-advance was found to contain malicious code...

Malicious code in thread-await-function-runtime-balance (npm)

The package thread-await-function-runtime-balance was found to contain malicious code...

Malicious code in load-runtime-benchmark-hash-cluster (npm)

The package load-runtime-benchmark-hash-cluster was found to contain malicious code...

Malicious code in aws-ui-runtime (npm)

The package aws-ui-runtime was found to contain malicious code...

Malicious code in sanitize-runtime-test-dog-user (npm)

The package sanitize-runtime-test-dog-user was found to contain malicious code...

MAL-2025-29205 Malicious code in pi-async-runtime-report-sun (npm)

The package pi-async-runtime-report-sun was found to contain malicious code...

MAL-2025-32202 Malicious code in rho-rho-runtime-small-root (npm)

The package rho-rho-runtime-small-root was found to contain malicious code...

MAL-2025-26385 Malicious code in mindspin (npm)

The package mindspin was found to contain malicious code...

MAL-2025-15231 Malicious code in aws-ui-runtime (npm)

The package aws-ui-runtime was found to contain malicious code...

MAL-2025-15212 Malicious code in await-error-runtime-wind-gamma (npm)

The package await-error-runtime-wind-gamma was found to contain malicious code...

CVE-2025-54867

Youki is a container runtime written in Rust. Prior to version 0.5.5, if /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem. This issue has been patched in version 0.5.5...

CVE-2025-54867 Youki Symlink Following Vulnerability

Youki is a container runtime written in Rust. Prior to version 0.5.5, if /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem. This issue has been patched in version 0.5.5...

CVE-2025-54867

Youki (Rust-based container runtime) before v0.5.5 is vulnerable: if /proc and /sys in the rootfs are symbolic links, an attacker with local access could potentially gain access to the host root filesystem. Root cause: improper handling of symbolic links in rootfs; impact: high (host filesystem a...