MAL-2025-26446 Malicious code in mintranet (npm)

The package mintranet was found to contain malicious code...

MAL-2025-12703 Malicious code in @zalastax/nolb-node-w (npm)

The package @zalastax/nolb-node-w was found to contain malicious code...

MAL-2025-33085 Malicious code in shell-uglify-uglify-fast-grid (npm)

The package shell-uglify-uglify-fast-grid was found to contain malicious code...

MAL-2025-10565 Malicious code in @zalastax/nolb-_vej (npm)

The package @zalastax/nolb-vej was found to contain malicious code...

MAL-2025-15131 Malicious code in ava-ilable-down-load-mp3-today-257706-but-id-rather-be-with-you-why9d-hoeovu (npm)

The package ava-ilable-down-load-mp3-today-257706-but-id-rather-be-with-you-why9d-hoeovu was found to contain malicious code...

MAL-2025-18555 Malicious code in do-wnload-available-mens-needs-womens-needs-whatever-egojv-aclbsw (npm)

The package do-wnload-available-mens-needs-womens-needs-whatever-egojv-aclbsw was found to contain malicious code...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-1979)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : RDMA/core: Silence oversized kvmalloc warningCVE-2025-37867 igb: revert rtnllock that causes deadlockCVE-2023-53060 bnxten: Avoid order-5 memory...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-1957)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gpio: Restrict usage of GPIO chip irq members before initializationCVE-2022-49072 mmc: core: use sysfsemit instead of sprintf.CVE-2022-49267 ipv4:...

Scam hunter scammed by tax office impersonators

The next time you shake your head at another online scam and vow that you'd never fall for it, remember that even the most tech-savvy people can sometimes slip up. A case in point: Julie-Anne Kearns. This self-made scam-hunter told her story to the Guardian last week, revealing how she had been...

That “Amazon Safety Recall” message may well be a scam

Scammers are using the age old tactic of scaring victims into clicking by sending out fake product recall messages from Amazon. The text message tells you that the item does not meet Amazon’s standards, and tries to install some urgency by claiming it is not safe to use. It also includes a link...

Linux Distros Unpatched Vulnerability : CVE-2022-50211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md-raid10: fix KASAN warning There's a KASAN warning in raid10removedisk when running the lvm test lvconvert-raid-reshape.sh. We fix this warning by verifying...

Linux Distros Unpatched Vulnerability : CVE-2022-49841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: serial: imx: Add missing .thawnoirq hook The following warning is seen with non-console UART...

Linux Distros Unpatched Vulnerability : CVE-2024-26864

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tcp: Fix refcnt handling in inethashconnect. syzbot reported a warning in...

A week in security (August 4 – August 10)

Last week on Malwarebytes Labs: Adult sites trick users into Liking Facebook posts using a clickjack Trojan Facebook users targeted in ‘login’ phish TeaOnHer, the male version of Tea, is leaking personal information on its users too How Google, Adidas, and more were breached in a Salesforce scam...

Linux Distros Unpatched Vulnerability : CVE-2025-23149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tpm: do not start chip while suspended Checking TPMCHIPFLAGSUSPENDED after the call to...

Linux Distros Unpatched Vulnerability : CVE-2022-50085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dm raid: fix address sanitizer warning in raidresume There is a KASAN warning in raidresume...

Linux Distros Unpatched Vulnerability : CVE-2024-27067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: xen/evtchn: avoid WARN when unbinding an event channel When unbinding a user event channel,...

Linux Distros Unpatched Vulnerability : CVE-2025-40325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid10: wait barrier before returning discard request with REQNOWAIT raid10handlediscard should wait barrier before returning a discard bio which has...

Linux Distros Unpatched Vulnerability : CVE-2022-50100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sched/core: Do not requeue task on CPU excluded from cpusmask The following warning was triggered on a large machine early in boot on a distribution kernel but...

Linux Distros Unpatched Vulnerability : CVE-2025-38454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ALSA: ad1816a: Fix potential NULL pointer deref in sndcardad1816apnp Use prwarn instead of...