Malicious code in crypto-invoicer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce45f4356717c34ab095570b175a0fa8bb5c8b2929e42e73d1997dc8fdec3a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2451 Malicious code in idme-component-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1194c5ee341dd44fccad1c3e2a9d698dd452b384ab16498ae5b59a40f00787a7 The OpenSSF Package Analysis project identified 'idme-component-utilities' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2025-2216 Malicious code in @idme-components/component-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f94dc67ea91d37d381ca7625ed1162cd5013c5643066c51b18b123ab66fada91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2152 Malicious code in certifications (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7d51c9defecdd382c5048eb6f92b32558355b8457b2b5cd63f3d86e12e8ed35b Package contains a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-03-certifications...

MAL-2025-2151 Malicious code in dexter-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af68f212ffdb2522ba261549728dc70fe8cb18c52beaed06290818706c688606 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2155 Malicious code in sdxcode1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e86442bd4bd6e2d95d5da4c3cf82c1961b38b57f4e51b8654d2d3398990dece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2149 Malicious code in nmp-frontend-libraries (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9320142027c800d4b8427512d6c6c219bc910b204b892be28af3a3849302e649 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2148 Malicious code in d4rk0nm3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fcd44fdf07755c2f5060eee6df68679af14c7bd6185b52853041856db638c7da The OpenSSF Package Analysis project identified 'd4rk0nm3' @ 1.0.6 npm as malicious. It is considered malicious because: - The package...

Linux Distros Unpatched Vulnerability : CVE-2024-35878

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - of: module: prevent NULL pointer dereference in vsnprintf In ofmodalias, we can get passed the str and len parameters which would cause a kernel oops in vsnprin...

Linux Distros Unpatched Vulnerability : CVE-2024-42090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pinctrl: fix deadlock in createpinctrl when handling -EPROBEDEFER In createpinctrl, pinctrlmapsmutex is acquired before calling addsetting. If addsetting return...

Linux Distros Unpatched Vulnerability : CVE-2024-46836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: aspeedudc: validate endpoint index for ast udc We should verify the bound of the array to assure that host may not manipulate the index to point pa...

Linux Distros Unpatched Vulnerability : CVE-2024-27041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: fix NULL checks for adev-dm.dc in amdgpudmfini Since 'adev-dm.dc' in amdgpudmfini might turn out to be NULL before the call to...

Linux Distros Unpatched Vulnerability : CVE-2021-47640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Fix early region not updated correctly The shadow's page table is not updated...

Linux Distros Unpatched Vulnerability : CVE-2023-52761

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv: VMAPSTACK overflow detection thread-safe commit 31da94c25aea riscv: add VMAPSTACK overflow detection added support for CONFIGVMAPSTACK. If overflow is...

Linux Distros Unpatched Vulnerability : CVE-2024-44931

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: gpio: prevent potential speculation leaks in gpiodevicegetdesc Userspace may trigger a...

Linux Distros Unpatched Vulnerability : CVE-2021-47537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix a memleak bug in rvumboxinit In rvumboxinit, mboxregions is not freed or...

Linux Distros Unpatched Vulnerability : CVE-2024-47712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix potential RCU dereference issue in wilcparsejoinbssparam In the...

Linux Distros Unpatched Vulnerability : CVE-2024-47743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KEYS: prevent NULL pointer dereference in findasymmetrickey In findasymmetrickey, if all NUL...

Linux Distros Unpatched Vulnerability : CVE-2024-46715

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - driver: iio: add missing checks on iioinfo's callback access Some callbacks from iioinfo structure are accessed without any check, so if a driver doesn't...

MAL-2025-2070 Malicious code in connector-colaborator1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9a80cb3d91a164687c80e6c2353408b9a523ab14d72481ceda8aeb7e875b339c The OpenSSF Package Analysis project identified 'connector-colaborator1' @ 1.0.0 npm as malicious. It is considered malicious because: - The...