[SECURITY] Fedora 44 Update: python-uv-build-0.11.11-1.fc44

This package is a slimmed down version of uv containing only the build backend...

Malicious code in arlo-meeting-assistant-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842ae675e3d076ecc89e2697ee378f503945bae268487584277cd92a93ec44fe The package arlo-meeting-assistant-backend was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-116224

Malicious code in backend-barnard-galaxy-foundation npm...

Malicious code in backend-configstore-node-sass-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6b9ac0075b325abe952216f78ce9a11d4101d6d1aabdbee5e7aff20ac8216e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-37197 Malicious code in triggerator-backend (npm)

The package triggerator-backend was found to contain malicious code...

Malicious code in focc-commons-lib-backend-commons-node (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in paypal-expanded-integration-backend-node (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-47762 Unexpected visibility of environment variable configurations in @backstage/plugin-app-backend

Backstage is an open framework for building developer portals. Configuration supplied through APPCONFIG environment variables, for example APPCONFIGbackendlistenport=7007, where unexpectedly ignoring the visibility defined in configuration schema. This occurred even if the configuration schema...

Code Execution Vulnerability in cms made simple Backend Package Release

CMS Made Simple is an open source content management system. It is built using PHP and Smarty Engine , which separates content , functionality and templates . cms made simple version 2.2.7 code execution vulnerability exists in the background when decompressing the uploaded zip package , due to t...