Malicious code in lumo-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab5d24591ceb311425ae395bd2b1bf7f82818bd6c7946d669a19c619462fd755 The package lumo-api-client was found to contain malicious code. Source: ghsa-malware da916419989a0707bcaa3fc59ba24e3ef90e2ec5df35aa6cc1e81f8d3cb82c6...

MAL-2026-418 Malicious code in nanoid-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad39f50bf85a03002a528aac3cf53797c47e72d196c7e0f9b92623e03088abf The package nanoid-js was found to contain malicious code. Source: ghsa-malware b20b5d4f24d425723aaaf45603909066d5983fe5341afba20f47d091f7ac0933 Any...

MAL-2026-412 Malicious code in connect-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7310f112bc55acc6b996816b40e9571269b53fa24468f9cd4766f3de0175a7f The package connect-web was found to contain malicious code. Source: ghsa-malware cd2c2fd9ae7a1a5387c2635150ed900d7dea7294e29dc1df20b9ccf00b7888ed An...

MAL-2026-420 Malicious code in oce-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3bb1f0bc8596c323c58dd811956c6002337f6f9f660adb266b7b722880705d The package oce-components was found to contain malicious code. Source: ghsa-malware 01822c3aed2c0b5e7611959aab8ed47c7722edbc8cef5b339dd6413805eecdda...

MAL-2026-417 Malicious code in kanban-webcomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec3c671a99b49533fbfeaf2dd948f86f14d82ee338f622af22283b774159881f The package kanban-webcomponent was found to contain malicious code. Source: ghsa-malware...

Malicious code in coopshares-webcomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2f65589819f3e12665d8524a5db477f2c222a83ed178b584e7cf8e5901ead2 The package coopshares-webcomponent was found to contain malicious code. Source: ghsa-malware...

MAL-2026-413 Malicious code in coopshares-webcomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2f65589819f3e12665d8524a5db477f2c222a83ed178b584e7cf8e5901ead2 The package coopshares-webcomponent was found to contain malicious code. Source: ghsa-malware...

MAL-2026-408 Malicious code in bitbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12996eb5ffac4767e62d0de9652080c360a42cc716421449362f9443c0ec02f4 The package bitbot was found to contain malicious code. Source: ghsa-malware 8167eda858c69a7322383c658afb961cdead784baba89931b2a10c0856c4a0cc Any...

MAL-2026-432 Malicious code in universal-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5b2c6fa041d1cac8de4366ee4973b7748dd0ef711771280413bd57d4318175 The package universal-provider was found to contain malicious code. Source: ghsa-malware...

Malicious code in chai-chain-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3340d37485bf0cbe47f2378b96588e8afadc83635bef93d108730ea72ab8f78 The package chai-chain-async was found to contain malicious code. Source: ghsa-malware a3404961b3edc416f501bf5ec175f0bbb95a188e9f1210305c9e37783e6265...

Malicious code in potdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a65730c16a2c27ad2cc810d067426e10aa9a28fae114fe94bb6f26e54bc45bc The package potdf was found to contain malicious code. Source: ghsa-malware 9537cd4226a1c122965aec751dfcb6153489552f7e29f57dcd62274654ec136a Any...

Linux Distros Unpatched Vulnerability : CVE-2025-11246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.4 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowe...

Linux Distros Unpatched Vulnerability : CVE-2025-13878

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Malformed BRID/HHIT records can cause named to terminate unexpectedly. This issue affects BIND 9 versions 9.18.40 through 9.18.43, 9.20.13 through 9.20.17,...

Linux Distros Unpatched Vulnerability : CVE-2025-33230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious...

CVE-2026-22022

Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorized access to certain Solr APIs, due to insufficiently strict input validation in those components. Only deployments that meet all of the following criteria ar...

CVE-2025-33230

NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data...

CVE-2025-33228

NVIDIA Nsight Systems contains a vulnerability in the gfxhotspot recipe, where an attacker could cause an OS command injection by supplying a malicious string to the processnsysrepcli.py script if the script is invoked manually. A successful exploit of this vulnerability might lead to code...

CVE-2025-33230

NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data...

CVE-2025-33231

NVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading mechanism where an attacker could cause an uncontrolled search path element by exploiting insecure DLL search paths. A successful exploit of this vulnerability might lead to code execution, escalation of...

CVE-2025-33228

NVIDIA Nsight Systems contains a vulnerability in the gfxhotspot recipe, where an attacker could cause an OS command injection by supplying a malicious string to the processnsysrepcli.py script if the script is invoked manually. A successful exploit of this vulnerability might lead to code...