Malicious code in pkurbatsky-uni-kit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dbcb621ff6e34880a313bab99393077ebdbb6915411f35c9648e1741ce502d3 Any computer that has this package installed or running should be considered...

MAL-2025-4613 Malicious code in rosetta-primitives (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 066c537cf24b296d35abde5f38191e4f60c82f7bd0583997251e70bdb2c21052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4637 Malicious code in @majidalfuttaim/maf-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2330446b43c4350ffd756e057399577c16b5b7b20767a3a71fc73b20664fe62 Any computer that has this package installed or running should be considered...

MAL-2025-4608 Malicious code in @pentestleg/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12690fd1c593ee20e534b6c4d32dabdc2e39c773c7a78d9f64ec44b457645f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @fronteg/react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a00cbd466b7c4e34b73a25864bfbbf1d649af40b160cff27b859d85074a74fd7 Any computer that has this package installed or running should be considered...

Malicious code in vite-plugin-svgr-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d55ebd57427c5d4a72a5d0b5c933540ce481fba40f3633f37618562ef4c8554e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4602 Malicious code in process-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca9b7f021303c59709dfd4a00e08e0c293215fade24f655e4fe0ff057ef40d4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4600 Malicious code in odin-security1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d86b20d8160d57b785f74b9bba211706cb3432a2060da273c1b876e3d2cfa39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nexpi-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b8f8b92b2eff3d48f438a764913f3c88f02318ff7b4cc2d8783c332e76885b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4599 Malicious code in nexpi-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b8f8b92b2eff3d48f438a764913f3c88f02318ff7b4cc2d8783c332e76885b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7510-8: Linux kernel (AWS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Network block device...

USN-7516-7: Linux kernel (AWS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...

CVE-2025-41651

Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise...

MAL-2025-4586 Malicious code in env-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 105ae811c2409aa9875948339815f7f362e64e01e0c82342286fba8de426878f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4587 Malicious code in ethereum-smart-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e10c205ca79402ee59b57b5e2a0475562ba75988af429715c808ad690e6fa49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4536 Malicious code in xsolla-pay2play-widget (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48525bae2b7d23a83f3e96e77031380673cc831294a477623f29b8b82b9a8fa9 Any computer that has this package installed or running should be considered...

USN-7510-7: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Network block device...

USN-7513-4 linux-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - RISC-V architecture; - x86 architecture; - Block layer subsystem; - Compute Acceleration Framework; - ACPI drivers;...

USN-7521-3: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Serial ATA and Parallel...

MAL-2025-4530 Malicious code in ledger-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc743e9a6f102ba2318706d8d0396d38233132640f0d11cffb7388e14bb6537b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...