Malicious code in adobe-alloy (npm)

The package adobe-alloy was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a8e952541082c8bec5f3b5c23a250995aa6d04b35925087502b6ed7100760d27 This package installs a dependency hosted on a custom domain that runs an inf...

CVE-2025-20314

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to improper...

MAL-2025-47579 Malicious code in altoqitec-login-integrado-react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 36e8fa2ecf486300b0bbfb8d83e585407f8717849e9e2b0c12da3147caca1d87 The OpenSSF Package Analysis project identified...

A Dangerous Worm Is Eating Its Way Through Software Packages

Plus: An investigation reveals how US tech companies reportedly helped build China’s sweeping surveillance state, and two more alleged members of the Scattered Spider hacking group were arrested...

Malicious code in lynx-explorer (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in suchinind (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a328ee17c3878f22beddf954e26fea98cfcedc0377a9aae3f9382b01cb55acf Any computer that has this package installed or running should be considered...

Malicious code in supply_chain_test_quang (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9374e2a02144addb7ed698eac9189f2c556781a55dd381f4cf4d28d8ae95d07b Any computer that has this package installed or running should be considered...

GHSA-GVGC-3CH5-PX8P vulnerabilities

Vulnerabilities for packages: tiff...

DSA-6000-1 libcpanel-json-xs-perl - security update

Bulletin has no description...

Malicious code in delta-cherry-yam-svnlt (npm)

The package delta-cherry-yam-svnlt was found to contain malicious code...

Malicious code in zaki-oncom18-breki (npm)

The package zaki-oncom18-breki was found to contain malicious code...

Malicious code in okwinclubb (npm)

The package okwinclubb was found to contain malicious code...

Malicious code in bella-nasisayur96-kyuki (npm)

The package bella-nasisayur96-kyuki was found to contain malicious code...

Malicious code in jingtong-heike-miansha (npm)

The package jingtong-heike-miansha was found to contain malicious code...

Malicious code in @teamteanpm2024/ipsa-dignissimos-consequatur (npm)

The package @teamteanpm2024/ipsa-dignissimos-consequatur was found to contain malicious code...

Malicious code in jade_8ocua_rm08t_indigo (npm)

The package jade8ocuarm08tindigo was found to contain malicious code...

Malicious code in blossom_vvkcd_wyskm_crystal (npm)

The package blossomvvkcdwyskmcrystal was found to contain malicious code...

Malicious code in fauzi-ikan45-breki (npm)

The package fauzi-ikan45-breki was found to contain malicious code...

Malicious code in xingdu-wuyu (npm)

The package xingdu-wuyu was found to contain malicious code...

Malicious code in nurul-mendoan91-breki (npm)

The package nurul-mendoan91-breki was found to contain malicious code...