USN-7609-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - InfiniBand drivers; - Netfilter; - Network traffic control; CVE-2025-38001, CVE-2025-37798, CVE-2025-37932,...

USN-7608-3: Linux kernel (Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - SMB network file system; - Memory management; - Netfilter; - Network traffic control; CVE-2025-37890...

Malicious code in github-datasource (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2771dacd93c395c86cb08e3778a5f1003eb477b0338d318b052586d73a90eaae Any computer that has this package installed or running should be considered...

Malicious code in price_wrapper (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f5ebf05195379c1b9f9c6c4d2e95b165168168a4ebba5c036cc803789ac46d2 Any computer that has this package installed or running should be considered...

MAL-2025-5498 Malicious code in gad-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44eb02d5baae88826b7d9e260ac54176cbfea03ea2b4fee26658a6d33c9657f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5500 Malicious code in guild-rotator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a65fe418eb6f3e397826f4b880e1a87b1966ddc4813ed73c05697b831d23e31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5384 Malicious code in cooo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware beaa040ccddb48af03323505f3ffb736d08b18d3fd03a39d535bb079cf6ee430 Any computer that has this package installed or running should be considered...

Malicious code in emerson-angular-trove (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3710a484d9498defd18d6636486ebe053b8e10147655e6735b1d3769cb3a8676 Any computer that has this package installed or running should be considered...

MAL-2025-5499 Malicious code in gkx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce62db6be2839a6d59876c849c75c5afc4237dd364e8caf60e99c5c1a00f7c9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5335 Malicious code in paysafe-wac-web-2fa-lib-fe (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc4a675838bd55e44681b2e5ad02794afe78cc93c4f58f0cf8efeb5acb19cc87 Any computer that has this package installed or running should be considered...

Malicious code in zaranian (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc245b6b3bfbfe10a327a3d1c888f3fef4d60c69bca43b6c9653c124d9aee1ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5492 Malicious code in cors-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8939034e252aec0a1bb8e90a23fa9e524d966682283a461f00204f8bedf29c33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-next-refresh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9098ebfb041888a88d100e173f83f951824eb6f393098d122919bb472a320dc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5489 Malicious code in axios-browseragent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 141e0ccda658d78aaa45367fc74a89b9c94789f9a4309c65abc8f94d80043e51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ROS-20250630-08

A vulnerability in a library for Python that extends the ease of creating, distributing, and installation of Python packages setuptools is related to an input validation error when processing sequences of directory traversal in packageindex.py. Exploitation of the vulnerability could allow an...

USN-7595-5: Linux kernel vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. CVE-2025-2312 Several security issues were discovered in the Linux kernel. An...

MAL-2025-5454 Malicious code in protos-gen-node (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b60e42ad145edc7eb0f1f70effb36918da50d55a15cc4a3d075d63c97335bfa Any computer that has this package installed or running should be considered...

Malicious code in webgl-fingerprinting (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 016147915e679ae2b97b3c040f72eb1171882e3785e1ae3aea0765497138c268 Any computer that has this package installed or running should be considered...

MAL-2025-5480 Malicious code in webgl-fingerprinting (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 016147915e679ae2b97b3c040f72eb1171882e3785e1ae3aea0765497138c268 Any computer that has this package installed or running should be considered...

MAL-2025-5389 Malicious code in data-layers (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67531c9bea415b9b319ff84e3899f3268e00ffa8cf9b11575043f70ace21ee85 Any computer that has this package installed or running should be considered...