Malicious code in cachelogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e02f47efec28d99ad336c04ca3c1b11816c3b78441d20dd22b5348ddd7601e3a The package cachelogger was found to contain malicious code...

Malicious code in jjkrtyugh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0904366cda22cf62b2dd45fb7b2cd6b3262da8294156f7fb3e21e6b8767c2ea2 The package jjkrtyugh was found to contain malicious code...

Malicious code in study-lab-e52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50708d98a0ca76a26e4b2f4ba435e4dec98c82e20f6fa80926cfd924adea2e06 The package study-lab-e52 was found to contain malicious code...

Malicious code in elf-stats-northbound-candy-916 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff880a8983abeac646ee0cbd12a48986cd76aadf15ff180cb363c7e1d6888d7a The package elf-stats-northbound-candy-916 was found to contain malicious code...

Malicious code in logstealer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bf68ac32c38c1a205b88db8107a6c806e9e8da5718755fc35978b0fa36a5d7 The package logstealer was found to contain malicious code...

MAL-2025-49448 Malicious code in testsender (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9107b82d44e1b1e3fb408a81f75dc224c17c0b321f5cefedb815fd9b8e33c84e The package testsender was found to contain malicious code...

MAL-2025-49452 Malicious code in xmlparserruntime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54372552e85ed31ab819b56e4044ab20c62b215b8faeaab5b1417307d60629f The package xmlparserruntime was found to contain malicious code...

MAL-2025-49414 Malicious code in gibertserctf6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a526f78592a0627ec9207cbbd060464a5de49a276676fffc68afe39e58d877c2 The package gibertserctf6 was found to contain malicious code...

MAL-2025-49407 Malicious code in finalmoyloyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55125b342b47dcefababdb74478820644fd9f4e19a428dd6e84e7af021cd1bf1 The package finalmoyloyt was found to contain malicious code...

MAL-2025-49450 Malicious code in xmljs2bank (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fcf388db79f826565b37bc7a45c157017b0dc3934aa6b5ba52db46de5190a23 The package xmljs2bank was found to contain malicious code...

MAL-2025-49400 Malicious code in capes-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6f39dd3b6ae0e4941ca23e3a41820dc7a088eeaaa0d56622174d29ae219f72 The package capes-ui was found to contain malicious code...

MAL-2025-49426 Malicious code in notimeoutexploit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56e6708bba819067474254117f51c5ccbc778fb7764244b463930fb62d4b5507 The package notimeoutexploit was found to contain malicious code...

Malicious code in bf-purchases-frontend-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dd380729ba06ecc83dd6bb54612311d4c2b15fc0b2eed47205416bf280f879 The package bf-purchases-frontend-web was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49398 Malicious code in bf-purchases-frontend-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dd380729ba06ecc83dd6bb54612311d4c2b15fc0b2eed47205416bf280f879 The package bf-purchases-frontend-web was found to contain malicious code. Source: ossf-package-analysis...

[SECURITY] [DLA 4367-1] keystone security update

Debian LTS Advisory DLA-4367-1 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara November 07, 2025 https://wiki.debian.org/LTS Package : keystone Version : 2:18.1.0-1+deb11u2 CVE ID : not yet available Debian Bug : 1120053 A vulnerability was found in...

Amazon Ion C 安全漏洞

Amazon Ion C is an amazon-ion open source C implementation of Amazon Ion. A security vulnerability exists in versions prior to Amazon Ion C v1.1.4, which stems from an uninitialized stack read issue that could cause UTF-8 escape sequences to expose sensitive data in memory...

SUSE SLES15 / openSUSE 15 Security Update : aws-efs-utils (SUSE-SU-2025:3954-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3954-1 advisory. Update to version 2.3.3 bsc1240044. Security issues fixed: - CVE-2025-55159: slab: incorrect bounds check in...

Amazon Linux 2 : runc, --advisory ALAS2NITRO-ENCLAVES-2025-072 (ALASNITRO-ENCLAVES-2025-072)

The version of runc installed on the remote host is prior to 1.3.2-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2025-072 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Amazon Linux 2023 : kmod-nvidia-latest-dkms (ALAS2023NVIDIA-2025-253)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-253 advisory. NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalatio...

PT-2025-45475

Name of the Vulnerable Software and Affected Versions Amazon Ion-C versions prior to 1.1.4 Description An uninitialized stack read issue exists that may allow an attacker to craft data and serialize it to Ion text. This could expose sensitive data in memory through UTF-8 escape sequences...