11474 matches found
[SECURITY] Fedora 42 Update: python-uv-build-0.9.7-2.fc42
This package is a slimmed down version of uv containing only the build backend...
Fedora 41 : python-uv-build / ruff / rust-get-size-derive2 / rust-get-size2 / etc (2025-00e5b3d89c)
The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-00e5b3d89c advisory. uv / python-uv-build 0.9.7 https://github.com/astral-sh/uv/releases/tag/0.9.7 0.9.6 This release contains an upgrade to Astral's fork of asynczip, which...
Fedora 42 : python-uv-build / ruff / rust-get-size-derive2 / rust-get-size2 / etc (2025-e60a4ba4d7)
The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-e60a4ba4d7 advisory. uv / python-uv-build 0.9.7 https://github.com/astral-sh/uv/releases/tag/0.9.7 0.9.6 This release contains an upgrade to Astral's fork of asynczip, which...
02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21360 more potentially affected by CVE-2025-64718 via js-yaml (>=3.0.0, <=3.14.1)
js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2025-64718 Source advisory: OSV:GHSA-MH29-5H37-FV8M...
@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +267 more potentially affected by CVE-2025-64525 via astro (>=3.0.12, <=5.15.1)
astro NPM version =3.0.12, =0.0.1, =1.0.0, =0.5.0, =1.0.0, =1.0.0, =0.2.0, =0.0.0-experimental-7c2f356, =0.0.0-experimental-7c2f356, =0.0.1, =0.0.1, =0.1.3, =0.1.0, =0.1.1 and more Source cves: CVE-2025-64525 Source advisory: OSV:GHSA-HR2Q-HP5Q-X767...
Malicious code in boson-build-tachyon-solis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e119e83c2c3e138467e3546a509359259ba2dc5811e76b7bfe8168f86ee3d73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179365
Malicious code in deimos-koa-build-figures npm...
EUVD-2025-177314
Malicious code in parsec-build-nconf-miranda npm...
EUVD-2025-178500
Malicious code in hugo-build-configstore-rollup-plugin npm...
EUVD-2025-176193
Malicious code in stream-build-ganymede-corvus npm...
EUVD-2025-179397
Malicious code in darkmatter-build-kuiperbelt-xanthus npm...
EUVD-2025-179982
Malicious code in boson-build-tachyon-solis npm...
Malicious code in auth0-scripts-slides-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae3dd049724262a8f2ef9d0819f09a1d834c89820f442c9d3f8332a4b2806f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176763
Malicious code in redshift-build-geodynamo-hyperion npm...
EUVD-2025-177114
Malicious code in polaris-build-event-dotenv-parse-variables npm...
EUVD-2025-176160
Malicious code in sublimation-archaeoastronomy-browserify-build npm...
EUVD-2025-179951
Malicious code in build-perseus-repository-asteroid npm...
Malicious code in redshift-build-geodynamo-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb6dba5456ba6db7b6f8b463cbe02f3929d795d4d1027a1cbc0a88a12d75528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188197 Malicious code in nebula-build-auth0-mui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64f27094bea7cf9d6b3712a3714081b3884123be343a197952c08d6ad1b940f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...