MAL-2025-39793 Malicious code in xigua-apple-lmlp (npm)

The package xigua-apple-lmlp was found to contain malicious code...

MAL-2025-36216 Malicious code in test-mlw2-sight-ricks (npm)

The package test-mlw2-sight-ricks was found to contain malicious code...

MAL-2025-34645 Malicious code in tectonic-virgo-janus-steganography (npm)

The package tectonic-virgo-janus-steganography was found to contain malicious code...

MAL-2025-20778 Malicious code in forever-bellatrix-chromedriver-stream (npm)

The package forever-bellatrix-chromedriver-stream was found to contain malicious code...

MAL-2025-11972 Malicious code in @zalastax/nolb-idy (npm)

The package @zalastax/nolb-idy was found to contain malicious code...

Malicious code in one-to-one-sample (npm)

The package one-to-one-sample was found to contain malicious code...

MAL-2025-29020 Malicious code in penguin-aspen-nto671-project (npm)

The package penguin-aspen-nto671-project was found to contain malicious code...

MAL-2025-9114 Malicious code in @neednova/metapod (npm)

The package @neednova/metapod was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2025-38157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath9khtc: Abort software beacon handling if disabled A malicious USB device can send a WMISWBAEVENTID event from an ath9khtc-managed device before beaconi...

RHSA-2025:12524 Red Hat Security Advisory: redis security update

Bulletin has no description...

MAL-2025-6749 Malicious code in pexels-figma (npm)

The package communicates with a domain associated with malicious activity...

MGASA-2025-0217 Updated wxgtk packages fix security vulnerability

In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL...

MAL-2025-6717 Malicious code in ent-profile-unauth-stop (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6688 Malicious code in @sangith/eslint-config (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6669 Malicious code in wild-pet-rest-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6643 Malicious code in npm-ot-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6533 Malicious code in kwargs (PyPI)

--- -= Per source details. Do not edit below this line.=-...

DSA-5969-1 redis - security update

Bulletin has no description...

MAL-2025-6772 Malicious code in tms-spike (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-53357

GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.78 through 10.0.18, a connected user can alter the reservations of another user. Thi...