MAL-2025-21772 Malicious code in goshell (npm)

The package goshell was found to contain malicious code...

MAL-2025-13246 Malicious code in @zalastax/nolb-postw (npm)

The package @zalastax/nolb-postw was found to contain malicious code...

MAL-2025-16281 Malicious code in buffe2-xor (npm)

The package buffe2-xor was found to contain malicious code...

MAL-2025-20746 Malicious code in fonemas (npm)

The package fonemas was found to contain malicious code...

MAL-2025-17133 Malicious code in cliff-yak-pes843-project (npm)

The package cliff-yak-pes843-project was found to contain malicious code...

MAL-2025-10979 Malicious code in @zalastax/nolb-commonj (npm)

The package @zalastax/nolb-commonj was found to contain malicious code...

MAL-2025-15736 Malicious code in bison-5wkld-cr4yx-ember-project (npm)

The package bison-5wkld-cr4yx-ember-project was found to contain malicious code...

MAL-2025-26624 Malicious code in momen (npm)

The package momen was found to contain malicious code...

MAL-2025-20258 Malicious code in favour (npm)

The package favour was found to contain malicious code...

MAL-2025-15474 Malicious code in bark-charlie-ed9l (npm)

The package bark-charlie-ed9l was found to contain malicious code...

MAL-2025-29375 Malicious code in plastik (npm)

The package plastik was found to contain malicious code...

MAL-2025-25700 Malicious code in lutachu (npm)

The package lutachu was found to contain malicious code...

MAL-2025-17536 Malicious code in cool-testing-7-9-2016 (npm)

The package cool-testing-7-9-2016 was found to contain malicious code...

MAL-2025-15712 Malicious code in biosignature-bionics-bionics-hermes (npm)

The package biosignature-bionics-bionics-hermes was found to contain malicious code...

MAL-2025-14274 Malicious code in alchemy-in4kp-dbli8-quasar-project (npm)

The package alchemy-in4kp-dbli8-quasar-project was found to contain malicious code...

RLSA-2025:9878 Important: libblockdev security update

The libblockdev packages provide a C library with GObject introspection support used for low-level operations on block devices. The library serves as a thin wrapper around plug-ins for specific functionality, such as LVM, Btrfs, LUKS, or MD RAID. Security Fixes: libblockdev: LPE from allowactive ...

RLSA-2025:8958 Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: Out-of-Bounds Read in libxml2 CVE-2025-32414 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information,...

GHSA-MQCP-P2HV-VW6X Withdrawn Advisory: Thor can construct an unsafe shell command from library input.

Withdrawn Advisory This advisory has been withdrawn because the method described can only be used with arguments that are controlled by Thor, and an external attacker cannot access the functionality described in the body of the CVE. This link is maintained to preserve external references. Origina...

BELL-CVE-2025-38254

Bulletin has no description...

UBUNTU-CVE-2025-52496

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery...