USN-7774-2 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Serial ATA and Parallel ATA...

MAL-2025-47570 Malicious code in vite-plugin-optichunk (npm)

The package vite-plugin-optichunk was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6397b10743e7db5e33165e9561210449ade8c6671259d396b92d6c5bc9becb49 Any computer that has this package installed or running should be considered fully...

MAL-2025-47534 Malicious code in @sev-ui-verse/event-bus (npm)

The package @sev-ui-verse/event-bus was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2e7a58185f216b62d263ee5e9e75c527755dab55a83fcaf06401463b8bccabc Any computer that has this package installed or running should be considered ful...

Malicious code in @sev-ui-verse/snackbar (npm)

The package @sev-ui-verse/snackbar was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f92a070917a547edd5e73a9b1b800cdd1d7e726e1886a712901dc3830d831abe Any computer that has this package installed or running should be considered full...

Malicious code in @sev-ui-verse/local-storage (npm)

The package @sev-ui-verse/local-storage was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5080905dc320899813f01d1c66b561c163fc638adfab5b390bdae2cac302cb7 Any computer that has this package installed or running should be considered...

MAL-2025-47540 Malicious code in @sev-ui-verse/invoice-models (npm)

The package @sev-ui-verse/invoice-models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f330a934831b8458a3b0de11c4efd1a661b00d1e2b7df7aa32b18a2278b789f3 Any computer that has this package installed or running should be considere...

MAL-2025-47547 Malicious code in @sev-ui-verse/ta-product-models (npm)

The package @sev-ui-verse/ta-product-models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d564367018a2440087b92862c41a4f2acf9fe9faf7c76a896fcf93f35b88642d Any computer that has this package installed or running should be...

Malicious code in @dropbox-photo-viewer/electron-app (npm)

The package @dropbox-photo-viewer/electron-app was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0e60f8bd38264b681d07237c310d98471fc7bfc1b9ab2bfabf4258bf01a9ea9 Any computer that has this package installed or running should be...

Malicious code in @sev-ui-verse/feature-flag (npm)

The package @sev-ui-verse/feature-flag was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc96c567d6c79894a3b93f553e9e63bfa8dd6754e3113b6aebd1a4e8e58d82fd Any computer that has this package installed or running should be considered...

Malicious code in @sev-ui-verse/react-query-client (npm)

The package @sev-ui-verse/react-query-client was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 665474d528ec1e43349cea649e53f67e00e56ef1f98b376e17c5a672fa0a7270 Any computer that has this package installed or running should be...

MAL-2025-47571 Malicious code in x402_monorepo (npm)

The package x402monorepo was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 289e2c6110a91f2ee16f7a0beed85851e59612748773355b6bb90a5b7073ad16 Any computer that has this package installed or running should be considered fully...

MAL-2025-47535 Malicious code in @sev-ui-verse/event-tracking (npm)

The package @sev-ui-verse/event-tracking was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 456d3a4ed1bb864eafcf6a65c30be392f9dc9ac1342ab0c1cd51cc463f11ff7f Any computer that has this package installed or running should be considere...

MAL-2025-47536 Malicious code in @sev-ui-verse/feature-flag (npm)

The package @sev-ui-verse/feature-flag was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc96c567d6c79894a3b93f553e9e63bfa8dd6754e3113b6aebd1a4e8e58d82fd Any computer that has this package installed or running should be considered...

MAL-2025-47568 Malicious code in truelayer-assignment (npm)

The package truelayer-assignment was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cb2b1d58a741e8bce6ef15fb465d4c1d070891603626cd0ff81d09e23d05a76 Any computer that has this package installed or running should be considered fully...

MAL-2025-47565 Malicious code in postman-converters (npm)

The package postman-converters was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f892ed43c85774f667cf9303e6d7ca7d30763a23dc3c6bb4e2261954dfee9070 Any computer that has this package installed or running should be considered fully...

Malicious code in dotenvx-config (npm)

The package dotenvx-config was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1b17bc0067221fd1c252545277d6c9462a5c5ef95cfcdf96f7e320699387861 Any computer that has this package installed or running should be considered fully...

Malicious code in @s21games/lsx-cli (npm)

The package @s21games/lsx-cli was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1691c42513d45af11b5d79dc36ba379453cd413b244d2e7581b4f7484cca828 Any computer that has this package installed or running should be considered fully...

USN-7769-2 linux-realtime-6.14 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...

Malicious code in bscrypt-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37b6a67f2ab3d64e12a4e1f6217f05bc3966886112b32fa46bfc0d26db96c06f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sha256-validation-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3290610bb31bf5689be7241b664ae5eb52b47b834fff3e2597c5ab75d88c4bec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...