MAL-2025-2922 Malicious code in markdown-to-html (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3020 Malicious code in ytest-cov (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2978 Malicious code in multiopython (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2970 Malicious code in lalpulsar (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2921 Malicious code in zkdrops-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2896 Malicious code in splashthat (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2883 Malicious code in hibt-main (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2879 Malicious code in fullstory-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2858 Malicious code in bitvavo-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2840 Malicious code in azbit-main (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2779 Malicious code in postp2ptxnserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 477ef7e3eb9c560cf3beb43e8d618ba59ac783c7b0e17c6c2c1dba4c7050c38d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2775 Malicious code in mathiconjsnz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 063eba8a5bc72b87463db9f8c7c398346eb615d05ca8fc3a68827e41d7458ee2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-HH3M-G4QJ-4835 vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-54VH-QPWP-XFR9 vulnerabilities

Vulnerabilities for packages: samba...

PT-2025-13414

Name of the Vulnerable Software and Affected Versions Data::Entropy versions 0.007 and earlier Description The issue concerns the use of the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Recommendations For Data::Entropy versio...

AI-Powered SaaS Security: Keeping Pace with an Expanding Attack Surface

Organizations now use an average of 112 SaaS applications —a number that keeps growing. In a 2024 study, 49% of 644 respondents who frequently used Microsoft 365 believed that they had less than 10 apps connected to the platform, despite the fact that aggregated data indicated over 1,000+ Microso...

MAL-2025-3461 Malicious code in quickcolors (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 05deb6781dc1a1781e9a811200127704052a70029ade2a3e97f2c010d9453fc2 Importing the module starts a code that exfiltrates data from local Telegram application --- Category: MALICIOUS - The campaign has clearly malicious intent,...

MAL-2025-2664 Malicious code in diacritic_remover (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62c08c719942e4e0ee918dd8123ce27e23156df6350d196258f583181c0414ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Important: libcap

Issue Overview: The PAM module pamcap.so of libcap configuration supports group names starting with "@", during actual parsing, configurations not starting with "@" are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potential...

Kubernetes: Vulnerability in Kubernetes NGINX Ingress Controller

Ingress Controllers play a critical role within Kubernetes clusters by enabling the functionality of Ingress resources. Azure Kubernetes Service AKS is aware of several security vulnerabilities affecting the Kubernetes ingress-nginx controller, including CVE-2025-1098, CVE-2025-1974, CVE-2025-109...