MAL-2025-6027 Malicious code in @blocks-shared/desktop-title (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6513 Malicious code in gramapi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2c3452393093f1f74c19a9049b50fb9c96e9b31ef8235cf0597eb656e6feb8ea The code is automatically starting, calling a Telegram channel with basic info, and waits for remote code to execute --- Category: MALICIOUS - The campaign has...

MAL-2025-5758 Malicious code in @shadowmonarchx/eslint_plugin_react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68a575ed67cd813fc81aec32ae29e2e8672e85158eebc9e3a07face9ed576247 Any computer that has this package installed or running should be considered...

Malicious code in appf-react-router-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bee107551e93c84b7b5e64794220ddf4898466e42cd01d1bdde8b41bb0cabd83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5801 Malicious code in @rupahealth/design (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0616aa94e7e7f933fb1f912840b3ec202980dde2d75d689d36e2d3cee1a22cec Any computer that has this package installed or running should be considered...

MAL-2025-5802 Malicious code in @super-alpha/api (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5367 Malicious code in bg-core-payments-automation (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7f31e4b1f7d92e4d7eb25476cf6041e8360ea7a50a002ab1311b3629f34c0f8 Any computer that has this package installed or running should be considered...

MAL-2025-5409 Malicious code in forms-extensions (npm)

The package communicates with a domain associated with malicious activity...

ALSA-2025:9327 Important: libblockdev security update

The libblockdev packages provide a C library with GObject introspection support used for low-level operations on block devices. The library serves as a thin wrapper around plug-ins for specific functionality, such as LVM, Btrfs, LUKS, or MD RAID. Security Fixes: libblockdev: LPE from allowactive ...

MAL-2025-5467 Malicious code in test_for_ntu_note_2 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5163 Malicious code in jimu-layouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65e335b07773d41eec063c08f22dfd26f8bbb4ea165ab0080df6f0d105f9e2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5473 Malicious code in vuepress-plugin-gitlabment (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5174 Malicious code in worldhello (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c09616d1a3cf63c69efe5b81863fee024898fd16025a96efa3e70504012bb6bd The OpenSSF Package Analysis project identified 'worldhello' @ 1.0.0 pypi as malicious. It is considered malicious because: - The package execut...

MAL-2025-5029 Malicious code in cosmy-wasmy (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52ae3c22beee95c306b386c69c33361301618a553e2920cf5fbde155626fc84f Any computer that has this package installed or running should be considered...

MAL-2025-5030 Malicious code in cycle-a (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5026 Malicious code in ccip-resolver (npm)

The package communicates with a domain associated with malicious activity...

DLA-4192-1 modsecurity-apache - security update

Bulletin has no description...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow through the SRBRoot::addTag function. An attacker can corrupt memory and execute arbitrary code locally by overflowing the subtag struct. Remediation There is no fixed version for icu. References - Red Hat Bugzilla Bug -...

Malicious code in athira-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e427393183e173f65795c42251b41cf0af7ad267e64f05e6651dc4e0766b150 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-20017

Multiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an authenticated, remote attacker to execute arbitrary commands using root-level privileges. The attacker would need to have Administrator privileges on the affected device to exploit these vulnerabilities. These...