Malicious code in webpack-cli-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ddac203965243a9f1a0fac7e0e5e5217dec4667917b4d23c3dc0e7780d3176 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-event-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ace3ab879582927c692b2b5cc3006afb79d6853935e6feb933e544a35260ed2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3795 Malicious code in next-auths (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecde41ba618c37507cba3ce0adf9fec9c17438fd3abbdcf1649d69d24ad38d01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3797 Malicious code in node-event-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ace3ab879582927c692b2b5cc3006afb79d6853935e6feb933e544a35260ed2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3789 Malicious code in aiide-cur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f87105b04445846be4b509793882c19f03cc302b5a62c868a7f5bc603d6ca1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Alibaba Cloud Linux 3 : 0087: librepo (ALINUX3-SA-2021:0087)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2021:0087 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-14352: A flaw was found in librepo in...

Malicious code in gltfvariantmeld (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0155401f6326638ba77892ee9e8132c5d7094e7f8bb20e46f22b995c255ce0a Any computer that has this package installed or running should be considered...

Malicious code in defi-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2a9667f769678a9fe048b57918ea5bfd54ef1323131a91f8d9e581feca74948 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in firefox-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d723f2db7c5589f68811969f49939e22ad3e71b00f741fc7f19a5bb6464da2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7506-4: Linux kernel (Xenial HWE) vulnerabilities

Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in...

ROS-2-586

2.586 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote attacke...

The Ongoing Risks of Hardcoded JWT Keys

In early May 2025, Cisco released software fixes to address a flaw in its IOS XE Software for Wireless LAN Controllers WLCs. The vulnerability, tracked as CVE-2025-20188, has a CVSS score of 10.0 and could enable an unauthenticated, remote attacker to upload arbitrary files to a susceptible syste...

USN-7506-3: Linux kernel (FIPS) vulnerabilities

Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in...

USN-7506-2: Linux kernel (AWS) vulnerabilities

Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in...

MAL-2025-3748 Malicious code in @myop/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cedbfe96e39f9d1720d4568325348b54f9806c883baab188675958573a2f34b Withdrawn Advisory This advisory has been withdrawn because @myop/cli is not malware. This link is maintained to preserve external references. Original...

MAL-2025-3753 Malicious code in @myop/vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4199f83f340c7a75c1d633190690367da39403fe2d61561ffbf5bf2014b591e9 Withdrawn Advisory This advisory has been withdrawn because @myop/vue is not malware. This link is maintained to preserve external references. Original...

Malicious code in dependencyconfusion6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fde19a45f6be5b0f2c1ffc00fb381166f7ec0cbb3d1df2ba0d3e169faedcd72a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3766 Malicious code in just-a-cute-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 762fbe2f0398f3fba03f9f919ed353d349802e39e0942990e4434ec4ddc9c1a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3757 Malicious code in backstage-plugin-kubernetes-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d5e128ce958505a3df2acbdc6b87aaf80b05e6b5a1dec494681ab2ceced6a0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3762 Malicious code in digitalexp-generic-action-executor-base-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c74e71216b7e6bb7987272c4df125113848f3e422b43e05ac07e53a4358e9d85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...