Malicious code in che-theia-activity-tracker (npm)

The package che-theia-activity-tracker was found to contain malicious code...

MAL-2025-16870 Malicious code in che-theia-activity-tracker (npm)

The package che-theia-activity-tracker was found to contain malicious code...

Malicious code in solana-wallet-discord-tracker (npm)

The package solana-wallet-discord-tracker was found to contain malicious code...

Malicious code in childprocess-tracker (npm)

The package childprocess-tracker was found to contain malicious code...

MAL-2025-9097 Malicious code in @marcos_feitoza/timer-tracker-swim (npm)

The package @marcosfeitoza/timer-tracker-swim was found to contain malicious code...

MAL-2025-16982 Malicious code in childprocess-tracker (npm)

The package childprocess-tracker was found to contain malicious code...

MAL-2025-33625 Malicious code in solana-wallet-discord-tracker (npm)

The package solana-wallet-discord-tracker was found to contain malicious code...

MAL-2025-37960 Malicious code in usage-tracker-public (npm)

The package usage-tracker-public was found to contain malicious code...

MAL-2025-33439 Malicious code in sm-tracker (npm)

The package sm-tracker was found to contain malicious code...

Debian dsa-5977 : aide - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5977 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5977-1 [email protected]...

USN-7692-1 request-tracker5 vulnerabilities

It was discovered that Request Tracker was susceptible to timing attacks. An attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 22.04 LTS. CVE-2021-38562 It was discovered that Request Tracker was susceptible to cross-site scripting attacks whe...

USN-7692-1: Request Tracker vulnerabilities

It was discovered that Request Tracker was susceptible to timing attacks. An attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 22.04 LTS. CVE-2021-38562 It was discovered that Request Tracker was susceptible to cross-site scripting attacks whe...

[SECURITY] [DLA 4269-1] ca-certificates-java bugfix update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4269-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès August 11, 2025 https://wiki.debian.org/LTS -...

Malicious code in torrent-tracker-scraper (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6603 Malicious code in torrent-tracker-scraper (PyPI)

--- -= Per source details. Do not edit below this line.=-...

NewStart CGSL MAIN 7.02 : tracker-miners Multiple Vulnerabilities (NS-SA-2025-0139)

The remote NewStart CGSL host, running version MAIN 7.02, has tracker-miners packages installed that are affected by multiple vulnerabilities: - libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of...

Cross-Site Scripting (XSS)

roundup is vulnerable to cross-site scripting XSS. The vulnerability is due to improper sanitization of user-supplied input in URLs when interacting with issue tracker templates devel and responsive, which allows an attacker to inject and execute arbitrary scripts in the context of a user's brows...

MAL-2025-5870 Malicious code in @gdcorp-commerce/cx-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10dd727785804adabaebb122da36be51c97a082214c8d6de8d70a1ad01f3b5e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gdcorp-commerce/cx-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10dd727785804adabaebb122da36be51c97a082214c8d6de8d70a1ad01f3b5e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @gdcorp-commerce/cx-event-tracker

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...