UBUNTU-CVE-2026-23992

go-tuf is a Go implementation of The Update Framework TUF. Starting in version 2.0.0 and prior to version 2.3.1, a compromised or misconfigured TUF repository can have the configured value of signature thresholds set to 0, which effectively disables signature verification. This can lead to...

Malicious code in at-least_one_existence_validator (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08fffb0c95221360f7006d33cb910ad23634908113a501199d4b2a619fe09027 --- Credit: OpenSSF source...

Malicious Package

Overview at-leastoneexistencevalidator is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid usi...