Malicious code in beta-epsilon-unix-emulate-spy (npm)

The package beta-epsilon-unix-emulate-spy was found to contain malicious code...

Malicious code in container-dog-omicron-beta-route (npm)

The package container-dog-omicron-beta-route was found to contain malicious code...

Malicious code in deploy-public-beta-optimize-permission (npm)

The package deploy-public-beta-optimize-permission was found to contain malicious code...

Malicious code in earth-beta-scale-meta-cold (npm)

The package earth-beta-scale-meta-cold was found to contain malicious code...

Malicious code in enum-beta-java-double-encrypt (npm)

The package enum-beta-java-double-encrypt was found to contain malicious code...

MAL-2025-17507 Malicious code in container-dog-omicron-beta-route (npm)

The package container-dog-omicron-beta-route was found to contain malicious code...

MAL-2025-15611 Malicious code in beta-decompress-daemon-minify-simple (npm)

The package beta-decompress-daemon-minify-simple was found to contain malicious code...

MAL-2025-18295 Malicious code in deploy-public-beta-optimize-permission (npm)

The package deploy-public-beta-optimize-permission was found to contain malicious code...

Malicious code in beta-decompress-daemon-minify-simple (npm)

The package beta-decompress-daemon-minify-simple was found to contain malicious code...

MAL-2025-19083 Malicious code in earth-beta-scale-meta-cold (npm)

The package earth-beta-scale-meta-cold was found to contain malicious code...

MAL-2025-19677 Malicious code in enum-beta-java-double-encrypt (npm)

The package enum-beta-java-double-encrypt was found to contain malicious code...

MAL-2025-15612 Malicious code in beta-epsilon-unix-emulate-spy (npm)

The package beta-epsilon-unix-emulate-spy was found to contain malicious code...

MAL-2025-15670 Malicious code in big-lambda-report-transpile-beta (npm)

The package big-lambda-report-transpile-beta was found to contain malicious code...

MAL-2025-29553 Malicious code in powerbi-client-beta (npm)

The package powerbi-client-beta was found to contain malicious code...

CVE-2025-54882

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. In versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0, Himmelblau stores the cloud TGT received during logon in the Kerberos credential cache. The created credential cache collection and received credentials...

CVE-2025-45765

ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective is "keysize is not something that is enforced by this library. Currently more recent versions of OpenSSL are enforcing some key sizes and those restrictions apply to the users of this gem also."...

OPENSUSE-SU-2025:15401-1 liblua5_5-5-5.5.0~beta1-1.1 on GA media

These are all security issues fixed in the liblua55-5-5.5.0beta1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2013-10033

An unauthenticated SQL injection vulnerability exists in Kimai version 0.9.2.x via the dbrestore.php endpoint. The flaw allows attackers to inject arbitrary SQL queries into the dates POST parameter, enabling file write via INTO OUTFILE under specific environmental conditions. This can lead to...

Google Launches DBSC Open Beta in Chrome and Enhances Patch Transparency via Project Zero

Google has announced that it's making available a security feature called Device Bound Session Credentials DBSC in open beta to ensure that users are safeguarded against session cookie theft attacks. DBSC, first introduced as a prototype in April 2024, is designed to bind authentication sessions ...

CVE-2025-50184

DbGate is cross-platform database manager. In versions 6.4.3-premium-beta.5 and below, DbGate is vulnerable to a directory traversal flaw. The file parameter is not properly restricted to the intended uploads directory. As a result, the endpoint that lists files within the upload directory can be...