Malicious code in replit_ruspty (crates.io)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 703ba59c0f40f937ba922d389d8beab406cc57110b792ed8d58ab7e8133c1712 The OpenSSF Package Analysis project identified 'replitruspty' @ 1.0.0 crates.io as malicious. It is considered malicious because: - The package...

MAL-2025-49349 Malicious code in pkg-with-optional (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7273cf1aeda44bb1d1c2b9e1336bae21d1e1c6606ec940757a218d7761a81b The package pkg-with-optional was found to contain malicious code. Source: ossf-package-analysis...

Aether - Adaptive Exploit and Threat Hunting Engine for EVM-based Repositories

Aether is a Python-based framework for analyzing Solidity smart contracts, generating vulnerability findings, producing Foundry-based proof-of-concept PoC tests, and optionally validating those tests on mainnet forks. It combines static analysis, prompt-driven LLM analysis, and AI-ensemble...

Characterizing Build Compromises through Vulnerability Disclosure Analysis

The software build process transforms source code into deployable artifacts, representing a critical yet vulnerable stage in software development. Build infrastructure security poses unique challenges: the complexity of multi-component systems source code, dependencies, build tools, the difficult...

MAL-2025-49310 Malicious code in faker-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2d88bf5533b182da36c514791c3e6841d83565d4d7f7065a09cdebddc2509453 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in mbed-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37cade9ed9f558086d52e3d4d53a6892f73d271c38ea94d5c0dd25d2a2eee32 The package mbed-js was found to contain malicious code. Source: ossf-package-analysis 09a05d2a84ef02b428f1176efd59cabf7a0b1c55bf4b0d8a2ac97c681ada2d...

MAL-2025-49311 Malicious code in balancer-labs-sor-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913cc298291011f049211a4379e100f5ca724f09b512b5fdfcc84fd0f1df3caa The package balancer-labs-sor-v1 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in fec-cms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74bf7ef4160cbd326cf0897bab905bbc059392581da57f6b10e99471e5c60c7 The package fec-cms was found to contain malicious code. Source: ossf-package-analysis 110aae9d904f5e4469a068418b8fe0f1fdf2094e4945829b8793584539f2a9...

Malicious code in solc_0.5.3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5a247d617b73fa5ff87742fa1c25a74b47bd06dcd2ad4069f1d9347b3edf7a The package solc0.5.3 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49317 Malicious code in solc_0.5.3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5a247d617b73fa5ff87742fa1c25a74b47bd06dcd2ad4069f1d9347b3edf7a The package solc0.5.3 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in stark-recurser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54520ff73a8cd962cb9ab3db426b6c93987e6b616edf752e0e5f6f346293af1b The package stark-recurser was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49318 Malicious code in stark-recurser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54520ff73a8cd962cb9ab3db426b6c93987e6b616edf752e0e5f6f346293af1b The package stark-recurser was found to contain malicious code. Source: ossf-package-analysis...

Talos-Apache-Log-Oversight-Scanner

Talos-Apache-Log-Oversight-Scanner Overview The Talos-Ap...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: media: rainshadow-cec: Fixed the TOCTOU race condition in raininterrupt. In the interrupt handler raininterrupt, the check for buffer fullness on rain-buflen is performed before acquiring rain-buflock. This creates a Time-of-Chec...

Astra Linux – Vulnerability in libsndfile

In version 1.2.2 of libsndfile, there is a buffer overflow issue in the oggvorbis.c file, specifically in the vorbisanalysiswrote out-of-bounds read function...

Malicious code in kubeflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3150469110dc3e3086ca34f822bec2df638b48510698b298219a1f7f402680c3 The package kubeflow was found to contain malicious code. Source: ghsa-malware dd99a9b554f60504a7d93b59d2a89050acc67db75c799deeacfa3b33019dd7be Any...

OESA-2025-2573 libsndfile security update

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fixes: libsndfile through 1.2.2 has an oggvorbis.c vorbisanalysiswrote out-of-bounds read.CVE-2024-50612...

OESA-2025-2571 libsndfile security update

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fixes: libsndfile through 1.2.2 has an oggvorbis.c vorbisanalysiswrote out-of-bounds read.CVE-2024-50612...

OESA-2025-2572 libsndfile security update

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fixes: libsndfile through 1.2.2 has an oggvorbis.c vorbisanalysiswrote out-of-bounds read.CVE-2024-50612...

Malicious code in baseline-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8f0d63405c3006d5549ebf1df01f884df985fdbac7dfcc07c22c06ad556c8e The package baseline-server was found to contain malicious code. Source: ghsa-malware 2eef37dadfa82b7f47a185f272073322cc60a193be57b46387b84bbc55b3655...