Malicious code in nodelog-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c3f1413a6184e042f68d9e0cee79523ea3c0566535bb56e1e0b13370875fd8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-babel-plugin-es6-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19412e443845747fa7d9b029fb4b869a17e57e3fc01783407a17684f0e1ad1d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48319 Malicious code in pretty-format-setting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98ad5e7fdf5539b67cf7d13f5634890ff9db4c4ef4eafed348b91d26b8a6982d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pretty-format-setting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98ad5e7fdf5539b67cf7d13f5634890ff9db4c4ef4eafed348b91d26b8a6982d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48320 Malicious code in react-tediter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbb4dfd10d5fb2961d7f32f3aa273844ef4a62f7eb9dc971e9213d5babb3e0a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-tediter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbb4dfd10d5fb2961d7f32f3aa273844ef4a62f7eb9dc971e9213d5babb3e0a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-ui-toast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6789082e9bf3c52d9daaa6abb3f09ea5012ad93106de355e66a04ee1be9c6605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48321 Malicious code in react-ui-toast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6789082e9bf3c52d9daaa6abb3f09ea5012ad93106de355e66a04ee1be9c6605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2025:03545-1 Security update for docker-stable

This update for docker-stable fixes the following issues: Note this update contains a already fixed references mostly. - Remove git-core recommends on SLE to avoid pulling it in unnecessary. bsc1250508 This feature is mostly intended for developers 'docker build git://' so most users already have...

SUSE SLES12 Security Update : docker-stable (SUSE-SU-2025:03540-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03540-1 advisory. - Include historical changelog data from before the docker-stable fork. The initial changelog entry did technically provide all the necessary...

CVE-2025-62159

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

EUVD-2025-33793

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

CVE-2025-62159 External Secrets Operator's BeyondTrust Provider has Insecure Secret Retrieval

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

CVE-2025-62159 External Secrets Operator's BeyondTrust Provider has Insecure Secret Retrieval

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

CVE-2025-62159 External Secrets Operator's BeyondTrust Provider has Insecure Secret Retrieval

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

CVE-2025-62159

CVE-2025-62159 affects External Secrets Operator’s BeyondTrust provider (versions 0.10.1–0.19.2). The legacy code retrieved Kubernetes secrets directly without validating namespace context or secret store type, enabling cross‑namespace secret access and security boundary violations. In version 0....

SUSE-SU-2025:03540-1 Security update for docker-stable

This update for docker-stable fixes the following issues: - Include historical changelog data from before the docker-stable fork. The initial changelog entry did technically provide all the necessary information, but our CVE tracking tools do not understand how the package is forked and so it see...

MAL-2025-48310 Malicious code in vite-plugin-vue-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dd0f0114d51acfaea5223d47aca72111de403cf5dbeb2fbff4b38345041765b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48303 Malicious code in react-toast-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d97a357fa8e584e4b5afe4a19068c7294cec8af76786077c6064e611d1aa185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-toast-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d97a357fa8e584e4b5afe4a19068c7294cec8af76786077c6064e611d1aa185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...