MAL-2025-3062 Malicious code in airbnb-dls-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d026d9563a73efac2558b2cf71cd6696600aecb85004606ba3dd3a87100bad0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DLA-4100-1 libdata-entropy-perl - security update

Bulletin has no description...

MAL-2025-2926 Malicious code in 3-0 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2893 Malicious code in secureshield2 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2888 Malicious code in passrdigitalportal (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2872 Malicious code in connection-colaborator (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2819 Malicious code in @uniqa/health-claim-ms-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2818 Malicious code in @uniqa/document-ms-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2817 Malicious code in @uniqa/digital-inventory-ms-spec-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2815 Malicious code in @uniqa/customer-masterdata-ms (npm)

--- -= Per source details. Do not edit below this line.=-...

OPENSUSE-SU-2025:14939-1 matrix-synapse-1.127.1-1.1 on GA media

These are all security issues fixed in the matrix-synapse-1.127.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14929-1 apache-commons-vfs2-2.10.0-1.1 on GA media

These are all security issues fixed in the apache-commons-vfs2-2.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-2690 Malicious code in miro-terms-banner-s3-uploader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03f414cb9ba131f7c282fb402bda0fd181018874345ee729525f90005f100e4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2710 Malicious code in solidity-ibc-eureka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d923c9d1d5e1d4fa797e2afa71b32c1e06ba2710f46b4110977f40a9aac9bbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OPENSUSE-SU-2025:14927-1 kubernetes1.32-apiserver-1.32.3-1.1 on GA media

These are all security issues fixed in the kubernetes1.32-apiserver-1.32.3-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-2622 Malicious code in team-bsb-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron da5627aaacdf2bd8ab0ce2e469ea8635108e857776ed8766ee9df47c4b66aaa8 This package appears to be part of a larger ecosystem acting as a placeholder for orchestrating interactions with other bsb malicious packages...

nossrf Server-Side Request Forgery (SSRF)

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery SSRF, where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism...

MAL-2025-3483 Malicious code in xcepthttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 98504a58d8dccbb3ea09cc521e14c9a64707763302db04111ad32eeba8616925 Importing the module starts downloading and executing first a script, and then a widely identified malware Packages are used as dependencies in a GitHub projec...

OPENSUSE-SU-2025:14892-1 ed25519-java-0.3.0-6.1 on GA media

These are all security issues fixed in the ed25519-java-0.3.0-6.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-2312 Malicious code in expect-violations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d98ae6c06bd6b1cd2115956a382b7cdd4a1901560535df9f8284ef29cb6a4550 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...