MAL-2025-33043 Malicious code in sh-utils (npm)

The package sh-utils was found to contain malicious code...

MAL-2025-23258 Malicious code in int-lib-config-utils (npm)

The package int-lib-config-utils was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-39021 Malicious code in webpack-core-utils (npm)

The package webpack-core-utils was found to contain malicious code...

MAL-2025-17239 Malicious code in coalesce-utils (npm)

The package coalesce-utils was found to contain malicious code...

Malicious code in buc-utils (npm)

The package buc-utils was found to contain malicious code...

Malicious code in ebos_lambda_utils (npm)

The package eboslambdautils was found to contain malicious code...

Malicious code in yelp-biz-perf-utils (npm)

The package yelp-biz-perf-utils was found to contain malicious code...

Malicious code in universal-fetch-utils (npm)

The package universal-fetch-utils was found to contain malicious code...

Malicious code in harvesting-utils (npm)

The package harvesting-utils was found to contain malicious code...

Malicious code in isv-buc-utils (npm)

The package isv-buc-utils was found to contain malicious code...

Malicious code in wonderflow-date-utils (npm)

The package wonderflow-date-utils was found to contain malicious code...

Malicious code in twitch-i18n-utils (npm)

The package twitch-i18n-utils was found to contain malicious code...

Malicious code in yandex-geo-utils (npm)

The package yandex-geo-utils was found to contain malicious code...

Malicious code in mm-scss-utils (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6944 Malicious code in mm-scss-utils (npm)

The package communicates with a domain associated with malicious activity...

Researchers Spot XZ Utils Backdoor in Dozens of Docker Hub Images, Fueling Supply Chain Risks

New research has uncovered Docker images on Docker Hub that contain the infamous XZ Utils backdoor, more than a year after the discovery of the incident. More troubling is the fact that other images have been built on top of these infected base images, effectively propagating the infection furthe...

MAL-2025-6823 Malicious code in yandex-money-bank-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e328869c4f8ab6a67a9978769746d5f2112baf3c92882879c8da485d824adc1 The OpenSSF Package Analysis project identified 'yandex-money-bank-utils' @ 8.8.9 npm as malicious. It is considered malicious because: - The...

Malicious code in yandex-money-bank-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e328869c4f8ab6a67a9978769746d5f2112baf3c92882879c8da485d824adc1 The OpenSSF Package Analysis project identified 'yandex-money-bank-utils' @ 8.8.9 npm as malicious. It is considered malicious because: - The...

USN-7688-1: cifs-utils vulnerabilities

Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly use this issue to escalate privileges. CVE-2020-14342 It was discovered that cifs-utils incorrectly used host credentials when mounting a krb5 CIFS file...

Linux Distros Unpatched Vulnerability : CVE-2025-2312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong...