Malicious code in mini-css-extract-plugin-carpo-backend-nightmare (npm)

The package mini-css-extract-plugin-carpo-backend-nightmare was found to contain malicious code...

Malicious code in elementory-g-backend (npm)

The package elementory-g-backend was found to contain malicious code...

MAL-2025-21391 Malicious code in gfk-bba-backend (npm)

The package gfk-bba-backend was found to contain malicious code...

MAL-2025-7040 Malicious code in 9c-lord-backend (npm)

The package 9c-lord-backend was found to contain malicious code...

MAL-2025-32357 Malicious code in rollup-plugin-archaeoastronomy-mocha-backend (npm)

The package rollup-plugin-archaeoastronomy-mocha-backend was found to contain malicious code...

MAL-2025-31928 Malicious code in redgiant-luna-backend-framework (npm)

The package redgiant-luna-backend-framework was found to contain malicious code...

MAL-2025-19488 Malicious code in elementory-g-backend (npm)

The package elementory-g-backend was found to contain malicious code...

MAL-2025-20927 Malicious code in framework-backend-alphard-slidev (npm)

The package framework-backend-alphard-slidev was found to contain malicious code...

MAL-2025-27934 Malicious code in nuxtjs-galaxy-backend-genomics (npm)

The package nuxtjs-galaxy-backend-genomics was found to contain malicious code...

MAL-2025-23251 Malicious code in install-zenobia-convict-backend (npm)

The package install-zenobia-convict-backend was found to contain malicious code...

MAL-2025-32920 Malicious code in selenium-exobiology-archaeogenetics-backend (npm)

The package selenium-exobiology-archaeogenetics-backend was found to contain malicious code...

Security update for libssh

This update for libssh fixes the following issues: CVE-2025-5372: sshkdf returns a success code on certain failures bsc1245314 CVE-2025-5987: Invalid return code for chacha20 poly1305 with OpenSSL backend bsc1245317 CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions...

Security update for libssh

This update for libssh fixes the following issues: CVE-2025-5372: sshkdf returns a success code on certain failures bsc1245314 CVE-2025-5987: Invalid return code for chacha20 poly1305 with OpenSSL backend bsc1245317 CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions...

SUSE CVE-2025-53534

RatPanel is a server operation and maintenance management panel. In versions 2.3.19 through 2.5.5, when an attacker obtains the backend login path of RatPanel including but not limited to weak default paths, brute-force cracking, etc., they can execute system commands or take over hosts managed b...

Malicious code in mint-backend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13804e154bae1eba072cd15e94a81c7d0e03e959552fd66f99f4c9de162b2db2 The OpenSSF Package Analysis project identified 'mint-backend' @ 2.0....

MAL-2025-6943 Malicious code in mint-backend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13804e154bae1eba072cd15e94a81c7d0e03e959552fd66f99f4c9de162b2db2 The OpenSSF Package Analysis project identified 'mint-backend' @ 2.0....

CVE-2025-8671

A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service DoS. By opening streams and then rapidly triggering the serv...

CVE-2025-8671 CVE-2025-8671

A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service DoS. By opening streams and then rapidly triggering the serv...

CVE-2025-8838

A vulnerability has been found in WinterChenS my-site up to 1f7525f15934d9d6a278de967f6ec9f1757738d8. This vulnerability affects the function preHandle of the file /admin/ of the component Backend Interface. The manipulation of the argument uri leads to improper authentication. The attack can be...

CVE-2025-8761

A vulnerability has been found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This vulnerability affects unknown code of the component Backend IPC Server. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...