675 matches found
Malicious code in betelgeuse-react-bootstrap-toml-wolf (npm)
The package betelgeuse-react-bootstrap-toml-wolf was found to contain malicious code...
Malicious code in antd-dione-gridsome-wolf (npm)
The package antd-dione-gridsome-wolf was found to contain malicious code...
MAL-2025-43454 Malicious code in antd-dione-gridsome-wolf (npm)
The package antd-dione-gridsome-wolf was found to contain malicious code...
MAL-2025-46740 Malicious code in xo-wolf-playwright-nestjs (npm)
The package xo-wolf-playwright-nestjs was found to contain malicious code...
MAL-2025-45580 Malicious code in postgres-stratosphere-draco-wolf (npm)
The package postgres-stratosphere-draco-wolf was found to contain malicious code...
MAL-2025-43615 Malicious code in betelgeuse-react-bootstrap-toml-wolf (npm)
The package betelgeuse-react-bootstrap-toml-wolf was found to contain malicious code...
In the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as expected and leading to the potential for predictable values returned from RAND_bytes() after fork() is called. This can lead to weak or predictable random numbers generated in applications that are both using RAND_bytes() and doing fork() operations. This only affects applications explicitly calling RAND_bytes() after fork() and does not affect any internal TLS operations. Although RAND_bytes() documentation in OpenSSL calls out not being safe for use with fork() without first calling RAND_poll(), an additional code change was also made in wolfSSL to make RAND_bytes() behave similar to OpenSSL after a fork() call without calling RAND_poll(). Now the Hash-DRBG used gets reseeded after detecting running in a new process. If making use of RAND_bytes() and calling fork() we recommend updating to the latest version of wolfSSL. Thanks to Per Allansson from Appgate for the report.
...
Linux Distros Unpatched Vulnerability : CVE-2022-39173
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TL...
Linux Distros Unpatched Vulnerability : CVE-2021-37155
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number in an OCSP request differs from the serial number in the OCSP...
Linux Distros Unpatched Vulnerability : CVE-2021-44718
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a...
Malicious code in chalk-winston-wolf-semantic-release (npm)
The package chalk-winston-wolf-semantic-release was found to contain malicious code...
Malicious code in non-blocking-wolf-umbra-gacrux (npm)
The package non-blocking-wolf-umbra-gacrux was found to contain malicious code...
Malicious code in australis-commitlint-loopback-wolf (npm)
The package australis-commitlint-loopback-wolf was found to contain malicious code...
Malicious code in farout-fetch-eslint-config-wolf (npm)
The package farout-fetch-eslint-config-wolf was found to contain malicious code...
MAL-2025-14990 Malicious code in async-paleobotany-wolf-eslint-config (npm)
The package async-paleobotany-wolf-eslint-config was found to contain malicious code...
MAL-2025-27828 Malicious code in npm-chalk-wolf-aurora (npm)
The package npm-chalk-wolf-aurora was found to contain malicious code...
Malicious code in wolf-thermochronology-europa-chakra-ui (npm)
The package wolf-thermochronology-europa-chakra-ui was found to contain malicious code...
Malicious code in glaciology-wolf-parsec-server (npm)
The package glaciology-wolf-parsec-server was found to contain malicious code...