Malicious code in libxmlfinal3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33a3cb237b9fefddf247fc73f80707be2197c34585f7bccee85ba3341ef600b The package libxmlfinal3 was found to contain malicious code...

Malicious code in libxmljsololo3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d1f93ba15e7b1dea2fd731f26d04e13c7ff43da48e5ec7921dfd34cb94879a The package libxmljsololo3 was found to contain malicious code...

Malicious code in libxmlfinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00664d7d8c2cad969c4ae81a3e41100c2d896bb0fc1eccde422b4c676e9bf9c The package libxmlfinal was found to contain malicious code...

Malicious code in elf-stats-sugarplum-mitten-141 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe2b5ed5ab130378db923b0c43eeb9e041a1dcc51641d1fbdbc2463e69da21a The package elf-stats-sugarplum-mitten-141 was found to contain malicious code. Source: ghsa-malware...

Malicious code in libxmlfinal4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41a78ad1712a21fd085e3a8188b1e5522b8140cdc8b562d5ff933ceefe923f6 The package libxmlfinal4 was found to contain malicious code...

MAL-2025-192442 Malicious code in elf-stats-ember-stockpile-448 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d94d098b5e5e55f41350611261b5b34945d38e148bb155c2c44ed42149f338 The package elf-stats-ember-stockpile-448 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192464 Malicious code in ofjaaah12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6b0fa4bde75a4ba12c7441a5c2f6e600058fbf3a13a4bada1e38270188185f The package ofjaaah12 was found to contain malicious code. Source: ghsa-malware 3782562ce78986e3e33a8ed547f3b8ff2223f9ada61ed387b46756fee19278aa Any...

MAL-2025-192459 Malicious code in libxmljsololo3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d1f93ba15e7b1dea2fd731f26d04e13c7ff43da48e5ec7921dfd34cb94879a The package libxmljsololo3 was found to contain malicious code...

MAL-2025-192453 Malicious code in libxmlfinal4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41a78ad1712a21fd085e3a8188b1e5522b8140cdc8b562d5ff933ceefe923f6 The package libxmlfinal4 was found to contain malicious code...

MAL-2025-192454 Malicious code in libxmlfinal5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75640235a927670445888fa0c679048cdc7ebe626bc9e046817570b83669cc3 The package libxmlfinal5 was found to contain malicious code...

MAL-2025-192447 Malicious code in elf-stats-snowy-toolkit-186 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42a7ca12612653aaf7b01c778d65725cf59436f0da1a2e2c1ef371bd5296a23 The package elf-stats-snowy-toolkit-186 was found to contain malicious code. Source: ghsa-malware...

CVE-2025-67499 vulnerabilities

Vulnerabilities for packages: flannel, rootlesskit, datadog-agent, containerd-fips, containerd, azure-ipam, datadog-agent-fips, istio-fips, buildkitd-fips, multus-cni, istio, flannel-fips, docker-fips, multus-cni-fips, calico-fips, buildkitd, buildah, amazon-k8s-cni-fips, podman, rke2-runtime,...

GHSA-JV3W-X3R3-G6RM vulnerabilities

Vulnerabilities for packages: flannel, rootlesskit, datadog-agent, containerd-fips, containerd, azure-ipam, datadog-agent-fips, istio-fips, buildkitd-fips, multus-cni, istio, flannel-fips, docker-fips, multus-cni-fips, calico-fips, buildkitd, buildah, amazon-k8s-cni-fips, podman, rke2-runtime,...

Webinar: How Attackers Exploit Cloud Misconfigurations Across AWS, AI Models, and Kubernetes

Cloud security is changing. Attackers are no longer just breaking down the door; they are finding unlocked windows in your configurations, your identities, and your code. Standard security tools often miss these threats because they look like normal activity. To stop them, you need to see exactly...

Trend Vision One™ Integration with AWS Security Hub CSPM: Unifying Cloud Security

The integration between Trend Vision One and Security Hub CSPM is exactly that, two powerful platforms enhancing each other to keep your AWS infrastructure protected...

Amazon Linux 2023 : libsoup3, libsoup3-devel (ALAS2023-2025-1288)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1288 advisory. A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafte...

Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2025-1309)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1309 advisory. If the value passed to os.path.expandvars is user-controlled aperformance degradation is possible when expanding environmentvariables. CVE-2025-6075 Tenable has extracted the preceding description bloc...

Amazon Linux 2023 : glib2, glib2-devel, glib2-static (ALAS2023-2025-1311)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1311 advisory. A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring function. If the string to escape contains a very large number of...

Amazon Linux 2023 : cups-filters, cups-filters-devel, cups-filters-libs (ALAS2023-2025-1291)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1291 advisory. CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the filters of the former cups-filters package as library functions to be used for the data form...

Amazon Linux 2023 : amd-ucode-firmware, iwl100-firmware, iwl105-firmware (ALAS2023-2025-1307)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1307 advisory. Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity. CVE-2025-54514 Improper...