USN-7276-1: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

MAL-2025-1490 Malicious code in modulous (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdabc10cd9ca2355a05df4fa5654942457a4635c6beeca4affd63d76ae733d11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1477 Malicious code in buzzblocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90e566d09228a3d324a125fa995bf615815fc9ccd42cb91cb3735dfaf5826ea3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in string-width-aliased (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da87811ca5c10d2b1336d454f91e621244269510433b79f3e5365176b8bcbe59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1494 Malicious code in publish-private-provider-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bab9547b7dc338e24a9c420f123daff70b59524719d6b302478d7987bf52e66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in go-bazel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ef352c6aec513ffecba2cb9cc5589dcc443af7a64f66a2a495e2c9135f31e86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1492 Malicious code in opensource.razorpay.dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24d0cff23cd279c7679ff230e73f2030f97701dd01f54be53b182dbcf72e7dcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 24.10 : Linux kernel vulnerabilities (USN-7277-1)

"The remote Ubuntu 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7277-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in th...

MAL-2025-1470 Malicious code in mygcpconfusedfunctionpocmaliciouspackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 716d3d7344ecf41184b8427f14e96e4bee1a868051bae909e0f3da2fcea408ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sysaid-infra-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32067df7060881cbe716c03dd7dc8c3b443263f314412e89e99a435622227b1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in keycloak-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa8e4f6226555a04c5be8dab42fe39f502765a1bd0dad057b6e8c057939e5dad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in multirpc-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca7a6b77df58901f3ac2f877998ea1904e3eb1178b8a90ebac3cfd990247f90a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1424 Malicious code in lbank-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af2e7b3d563cdc0ef10b52937250bae2ab41fce0d24fad93efa37fc06eab3d20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1398 Malicious code in bitstamp-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290131c8a4a16e54609d441ddef80033e6014ecd83f8d00a424f11b668329865 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitstamp-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290131c8a4a16e54609d441ddef80033e6014ecd83f8d00a424f11b668329865 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bithumb-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 900f6956e80a6ac7b93daf1bae288b01fb928e3f80a3beb36d063cb44ebaf8f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1395 Malicious code in bitstamp-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75d9c1b781dd9fd2cd794a0a246a84f54527c4d3c8c6ddd6ef84686d2214a560 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitstamp-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 437a05bba7dfbd27bffd62318989b3f29efaae52e5263f4ca0df2ea2725f24a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1422 Malicious code in kcex-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 250e2784873b2d4ccedb1c0017d13580afe0f3a3c3d956afeedcc1b962cc197d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1434 Malicious code in pionex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 140b5ef89db32e0c5bc1f860989081e6cdb3bcc488bafdb1b3e7e78ee78d29dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...