Malicious code in lbmtq7x (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lbjjpuyqqs (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lbcaltestipnern (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7883 Malicious code in lammcal6 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lambproxy2 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7704 Malicious code in g8402sunic (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiwsqjjbeqyn (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiwsamimxhff (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in agfosscab20 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-11274 vulnerabilities

Vulnerabilities for packages: chromium...

[SECURITY] Fedora 44 Update: 389-ds-base-3.2.2-2.fc44

389 Directory Server is an LDAPv3 compliant server. The base package includes the LDAP server and command line utilities for server administration...

OPENSUSE-SU-2026:10853-1 libppsdocument4_0-6-50.1-2.1 on GA media

These are all security issues fixed in the libppsdocument40-6-50.1-2.1 package on the GA media of openSUSE Tumbleweed...

MSC-2026-4193

This package was compromised to include malicious code, that exfiltrates personal user info and system details. Please use the latest safe version 2.5.0...

MSC-2025-3734

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

MAL-2026-3710 Malicious code in ethers-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8f43ab2ac9caeed4f5dd0895f4da7d3a646038768f5d0024f443bb527fd1ad95 The OpenSSF Package Analysis project identified 'ethers-logger' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: sed: sed-4.10-1.hum1 aarch64, x8664 sed-4.10-1.hum1.src src...

Malicious code in sparkling-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a51b8dc4e5a69bd2a09d2bb1c705963de6b9513ff871237d21a5f6641abc0ac The package sparkling-sdk was found to contain malicious code. Source: ghsa-malware b0457cea0504e91fd51a3802d694a20e91fab0bf48731ae4a18c484eab349202...

CLEANSTART-2026-DK61762 filippo

Multiple security vulnerabilities affect the prometheus-mysqld-exporter package. filippo. See references for individual vulnerability details...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

EUVD-2026-17095

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...