Malicious code in riana-teh20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f302ee71ee7c2d6ae4d67ac0ca357f3db72c2a7f442bcbbfa997d4fe239a5ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

SUSE CVE-2025-62156

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Versions prior to 3.6.12 and versions 3.7.0 through 3.7.2 contain a Zip Slip path traversal vulnerability in artifact extraction. During artifact extraction the unpack/untar logic...

SUSE CVE-2025-62157

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Argo Workflows versions prior to 3.6.12 and versions 3.7.0 through 3.7.2 expose artifact repository credentials in plaintext in workflow-controller pod logs. An attacker with permissio...

MAL-2025-49393 Malicious code in @acitons/artifact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac62cd10580c7abf091f134c736a371a496b61725eedfbe8330e2a792d7f08f The package @acitons/artifact was found to contain malicious code. Source: ghsa-malware...

Malicious code in @acitons/artifact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac62cd10580c7abf091f134c736a371a496b61725eedfbe8330e2a792d7f08f The package @acitons/artifact was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-38437

Malicious code in @acitons/artifact npm...

GO-2025-4024 Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows

Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows...

Exploit for Path Traversal in Fortinet Fortiweb

watchTowr-vs-FortiWeb-CVE-2025-25257 Detection Artifact Gener...

Exploit for Improper Validation of Certificate with Host Mismatch in Fortinet Fortiproxy

watchTowr-vs-FortiWeb-CVE-2025-25257 Detection Artifact Gener...

GO-2025-4077 Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations in github.com/docker/compose

Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations in github.com/docker/compose...

Malicious Package

Overview artifactregistry-login is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

CVE-2025-62725: From “docker compose ps” to System Compromise

Docker Compose powers millions of workflows, from CI/CD runners and local development stacks to cloud workspaces and enterprise build pipelines. It’s trusted by developers as the friendly layer above Docker Engine that turns a few YAML lines into a running application. In early October 2025, whil...

CVE-2025-62725

CVE-2025-62725 affects Docker Compose when resolving remote OCI artifacts. The vulnerability arises from path handling of annotations in OCI layers (com.docker.compose.file and com.docker.compose.envfile), where Docker Compose joins attacker-controlled paths with its local cache directory without...

Malicious code in mender-artifact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e94134964d7a293444da55c5300ca285bae3eac4e6bf9a1f89cc1d9a94f2ceae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-35770

Malicious code in mender-artifact npm...

Malicious Package

Overview mender-artifact is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48567 Malicious code in mender-artifact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e94134964d7a293444da55c5300ca285bae3eac4e6bf9a1f89cc1d9a94f2ceae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-35776

Malicious code in create-artifact-worker npm...

Malicious code in create-artifact-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17addb465b6ed297d01361f4bf1b6b46f5eb2917622ac0f7b577dae8e7c29cae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48560 Malicious code in create-artifact-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17addb465b6ed297d01361f4bf1b6b46f5eb2917622ac0f7b577dae8e7c29cae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...