Malicious Package

Overview transform-vue-jsx is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in transform-vue-jsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e223730f37f6e4ebbb935ce737076e8e48e23db4fb9f8d280cc9f93a6cf2193 The package transform-vue-jsx was found to contain malicious code. Source: ghsa-malware...

MAL-2026-577 Malicious code in transform-vue-jsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e223730f37f6e4ebbb935ce737076e8e48e23db4fb9f8d280cc9f93a6cf2193 The package transform-vue-jsx was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview transform-regenerator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in transform-regenerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27369af46b5944368333c959121eb4c1203bb7451f05eab71a7e8d030300331 The package transform-regenerator was found to contain malicious code. Source: ghsa-malware...

Malicious code in transform-async-to-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3375385fb6c066445341256f9ce616582a713468ea0649853056c24b4aaf1776 The package transform-async-to-generator was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview transform-async-to-generator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2026-561 Malicious code in transform-regenerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27369af46b5944368333c959121eb4c1203bb7451f05eab71a7e8d030300331 The package transform-regenerator was found to contain malicious code. Source: ghsa-malware...

MAL-2026-560 Malicious code in transform-async-to-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3375385fb6c066445341256f9ce616582a713468ea0649853056c24b4aaf1776 The package transform-async-to-generator was found to contain malicious code. Source: ghsa-malware...

Reference-Free Spectral Analysis of EM Side-Channels for Always-On Hardware Trojan Detection

Always-on hardware Trojans HTs pose a critical risk to trusted microelectronics, yet most side-channel detection methods rely on unavailable golden references. We present a reference-free approach that combines time-frequency EM analysis with Gaussian Mixture Models GMMs. By applying Short-Time...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: CVE-2025-38321: smb: Log an error when closeallcacheddirs fails bsc1246328. CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd bsc1249256. CVE-2025-39890:...

MiracleLinux 9 : kernel-5.14.0-503.19.1.el9_5 (AXSA:2025-9562:06)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9562:06 advisory. kernel: Bluetooth: l2cap: fix null-ptr-deref in l2capchantimeout CVE-2024-27399 kernel: bpf: Add BPFPROGTYPECGROUPSKB attach type enforcement in...

CVE-2020-17500

Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows Command Injection issue 1 of 4. The NDN-210 has a web administration panel which is made available over https. The logon method is basic authentication. There is a command injection issue that will result i...

CVE-2021-2276

Vulnerability in the Oracle iSetup product of Oracle E-Business Suite component: General Ledger Update Transform, Reports. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Malicious Package

Overview transform-decorators-legacy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2026-1376

Malicious code in transform-decorators-legacy npm...

Malicious code in transform-decorators-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40378c47c2f0fa31a922a290a6ec2a2ea207ca9531f35ff004ee5b7a451e647b The package transform-decorators-legacy was found to contain malicious code. Source: ghsa-malware...

MAL-2026-106 Malicious code in transform-decorators-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40378c47c2f0fa31a922a290a6ec2a2ea207ca9531f35ff004ee5b7a451e647b The package transform-decorators-legacy was found to contain malicious code. Source: ghsa-malware...

CVE-2026-21675

iccDEV contains a Use After Free vulnerability in CIccXform::Create(), where the hint manager is deleted improperly. Affected versions are 2.3.1 and earlier; the issue is fixed in 2.3.1.1. This affects the iccDEV color-management library and could enable exploitation through improper object clean...

EUVD-2023-60531

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix leak of dev tracker At the stage of direction checks, the netdev reference tracker is already initialized, but released with wrong put call...