Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in runtime-7.22.3.tgz

Summary IBM Watson Discovery Cartridge contains a vulnerable version of runtime-7.22.3.tgz Vulnerability Details CVEID:CVE-2025-27789 DESCRIPTION: Babel is a compiler for writing next generation JavaScript. When using versions of Babel prior to 7.26.10 and 8.0.0-alpha.17 to compile regular...

Malicious code in babel-npm-install (npm)

The package babel-npm-install was found to contain malicious code...

Malicious code in babel-plugin-transform-raptor-template (npm)

The package babel-plugin-transform-raptor-template was found to contain malicious code...

Malicious code in @zalastax/nolb-babel-prese (npm)

The package @zalastax/nolb-babel-prese was found to contain malicious code...

Malicious code in babel-npm-publish (npm)

The package babel-npm-publish was found to contain malicious code...

Malicious code in cluster-babel-apollo-cors (npm)

The package cluster-babel-apollo-cors was found to contain malicious code...

Malicious code in eclipse-spectron-webdriver-venus-babel (npm)

The package eclipse-spectron-webdriver-venus-babel was found to contain malicious code...

Malicious code in babel-preset-env-cx (npm)

The package babel-preset-env-cx was found to contain malicious code...

Malicious code in babel-plugin-server-remove (npm)

The package babel-plugin-server-remove was found to contain malicious code...

Malicious code in babel-plugin-throws-helper (npm)

The package babel-plugin-throws-helper was found to contain malicious code...

Malicious code in @zalastax/nolb-babel- (npm)

The package @zalastax/nolb-babel- was found to contain malicious code...

Malicious code in @zalastax/nolb-babel-6 (npm)

The package @zalastax/nolb-babel-6 was found to contain malicious code...

Malicious code in babel-magnetar-solarnebula-capella (npm)

The package babel-magnetar-solarnebula-capella was found to contain malicious code...

Malicious code in babel-europa-cybernetics-yonder (npm)

The package babel-europa-cybernetics-yonder was found to contain malicious code...

Malicious code in bunyan-transport-husky-babel (npm)

The package bunyan-transport-husky-babel was found to contain malicious code...

Malicious code in webdriverio-babel-nova-procyon (npm)

The package webdriverio-babel-nova-procyon was found to contain malicious code...

Malicious code in galaxy-altair-babel-link (npm)

The package galaxy-altair-babel-link was found to contain malicious code...

Malicious code in babel-plugin-transform-raptor-renderer (npm)

The package babel-plugin-transform-raptor-renderer was found to contain malicious code...

Malicious code in registry-got-babel-adonis (npm)

The package registry-got-babel-adonis was found to contain malicious code...

@toolspack/ttd-common (>=0.1.0 <=1.3.2), @toolspack/ttd-pdfjs (>=0.0.0 <=0.1.4) potentially affected by unknown CVE via babel-laoder (=0.0.1-security)

babel-laoder NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on babel-laoder and may be impacted: - @toolspack/ttd-common =0.1.0, =0.0.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15281...