MAL-2025-49340 Malicious code in loaders-fbo.gov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f7b9f592e7c3247848d84ace7b0946ea44a6d1b0b12a91563d2ccf8427e19e The package loaders-fbo.gov was found to contain malicious code...

MAL-2025-49332 Malicious code in capes-template-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69552ec46096bcb8407bb78e3a0e23b6b95e46ac69c7dd1c41aa79edf250cbe2 The package capes-template-angular was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49335 Malicious code in dowload_ebok_before_dawn_vampire_fallen_book_1_by_morgan_rice_fjwc4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa9e61b31da5488932412670513cd44ea3fc98821c392ddf8a4f3f2b1ebb15f The package dowloadebokbeforedawnvampirefallenbook1bymorganricefjwc4 was found to contain malicious code...

Inside an Automotive Giant’s Data Leak — A Cloud Misconfiguration Lesson for AWS Users

70 TB+ of data, hard-coded keys, and weak IAM controls. For even the most experienced enterprises, one configuration decision can be enough to surface how interdependent and vulnerable modern cloud systems truly are. The recent data exposure incident at a large automotive firm highlights this...

[SECURITY] Fedora 42 Update: rust-reqsign-0.18.0-1.fc42

Signing HTTP requests for AWS, Azure, Google, Huawei, Aliyun, Tencent and Oracle services...

[SECURITY] Fedora 41 Update: rust-reqsign-aws-v4-2.0.0-1.fc41

AWS SigV4 signing implementation for reqsign...

[SECURITY] Fedora 41 Update: rust-reqsign-0.18.0-1.fc41

Signing HTTP requests for AWS, Azure, Google, Huawei, Aliyun, Tencent and Oracle services...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file, sbom-scorecard...

Malicious code in frontend-buenaspracticas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fef9514917e2ce04a8fcbc279aabe7da3662c4eb8292959fc964bf44280adf6 The package frontend-buenaspracticas was found to contain malicious code...

MAL-2025-49298 Malicious code in frontend-buenaspracticas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fef9514917e2ce04a8fcbc279aabe7da3662c4eb8292959fc964bf44280adf6 The package frontend-buenaspracticas was found to contain malicious code...

Malicious code in dx_auth2_app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba4fd977bb9fcc546d31e9a9f84a5339660ae4f841ad226499d9d1e60de893e The package dxauth2app was found to contain malicious code...

Malicious code in @dvargas135/gunpowder-ghost (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400dea6d2b5bfe1ff00f2fe709cb1ef33f393894e93bff155b32021682d1e571 The package @dvargas135/gunpowder-ghost was found to contain malicious code...

Malicious code in gunpowder-ghost-curse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c321a65829e56f1b0a19c8674e57684adb978f6689b380037c41189d68cbfe2 The package gunpowder-ghost-curse was found to contain malicious code...

MAL-2025-49292 Malicious code in @alexandrsarioglo/npm-ghost-htb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff0b87bff66ff36f0fe152f37cd1d7a0733b0a9ff2eecbd10e0b8ccc52e4437 The package @alexandrsarioglo/npm-ghost-htb was found to contain malicious code...

MAL-2025-49299 Malicious code in gunpowder-ghost-curse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c321a65829e56f1b0a19c8674e57684adb978f6689b380037c41189d68cbfe2 The package gunpowder-ghost-curse was found to contain malicious code...

MAL-2025-49296 Malicious code in ecto-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce81e1cdd6102c7565db6c5e0e23b7776c666391fcaf74dd0dda3d9abc4a001f The package ecto-utils was found to contain malicious code...

Malicious code in @asarioglo/ect-472839 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d180dd98dca56258784c71c483fe7b43550997881bfa7874e06ab04613f7cb2f The package @asarioglo/ect-472839 was found to contain malicious code...

Malicious code in @qwant-internal/datahub-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71173ddf94db9194dbde8c27f8d6abad60f54b610533b5d69c1a89d2c002d391 The package @qwant-internal/datahub-logger was found to contain malicious code...

Malicious code in bcp-security-package-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ab9e582af309b4d91c05179b0b3a9d0532e26d3c7c34b1d80d0b1ad826d71c4 The package bcp-security-package-update was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49288 Malicious code in random-packaging (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd5ed79506422d4b93a37dfbe2323a2c38acb4890701d8dec59c72d9566a413 The package random-packaging was found to contain malicious code...