Malicious code in drift-v1-cli (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc8e83d9fff21b8fd67210fa3db37e1aec46e02dc3da9b43ebbc8ce199d20723 Any computer that has this package installed or running should be considered...

org.wildfly.core:wildfly-cli (2.0.0.cr3), org.wildfly.core:wildfly-core-dist (2.0.0.cr3) +16 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.cr3)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-cli 2.0.0.cr3 - org.wildfly.core:wildfly-core-dist 2.0.0.cr3 -...

org.wildfly.core:wildfly-cli (2.0.0.cr4), org.wildfly.core:wildfly-core-dist (2.0.0.cr4) +16 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.cr4)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-cli 2.0.0.cr4 - org.wildfly.core:wildfly-core-dist 2.0.0.cr4 -...

org.infinispan.server:infinispan-server-cli (8.1.0.alpha2), org.infinispan.server:infinispan-server-commons (8.1.0.alpha2) +47 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.cr5)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.cr5 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.infinispan.server:infinispan-server-cli 8.1.0.alpha2 -...

org.wildfly.core:wildfly-cli (2.0.0.cr6), org.wildfly.core:wildfly-core-dist (2.0.0.cr6) +16 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.cr6)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.cr6 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-cli 2.0.0.cr6 - org.wildfly.core:wildfly-core-dist 2.0.0.cr6 -...

org.wildfly.core:wildfly-cli (2.0.0.beta5), org.wildfly.core:wildfly-core-dist (2.0.0.beta5) +16 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.beta5)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-cli 2.0.0.beta5 - org.wildfly.core:wildfly-core-dist 2.0.0.beta5 -...

org.wildfly.core:wildfly-cli (2.0.0.beta7), org.wildfly.core:wildfly-core-dist (2.0.0.beta7) +16 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.beta7)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.beta7 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-cli 2.0.0.beta7 - org.wildfly.core:wildfly-core-dist 2.0.0.beta7 -...

org.infinispan.server:infinispan-server-cli (8.1.0.alpha1), org.infinispan.server:infinispan-server-commons (8.1.0.alpha1) +45 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.cr1)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.infinispan.server:infinispan-server-cli 8.1.0.alpha1 -...

net.welen.wildfly-jmx-cli:wildfly-jmx-cli (1.3.0), org.keycloak:keycloak-saml-wildfly-jakarta-subsystem (>=22.0.2, <=25.0.6) +93 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (21.1.0.final)

org.wildfly.core:wildfly-server MAVEN version 21.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - net.welen.wildfly-jmx-cli:wildfly-jmx-cli 1.3.0 -...

org.wildfly.core:wildfly-cli (2.0.0.cr2), org.wildfly.core:wildfly-core-dist (2.0.0.cr2) +16 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.cr2)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-cli 2.0.0.cr2 - org.wildfly.core:wildfly-core-dist 2.0.0.cr2 -...

org.wildfly.core:wildfly-cli (2.0.0.cr7), org.wildfly.core:wildfly-core-dist (2.0.0.cr7) +43 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.cr7)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.cr7 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-cli 2.0.0.cr7 - org.wildfly.core:wildfly-core-dist 2.0.0.cr7 -...

com.bertoncelj.wildflysingletonservice:wildfly-singleton-service (1.1.0), org.hawkular.agent:hawkular-dmr-client (>=0.15.0.final, <=0.15.3.final) +83 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.cr8)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.cr8 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - com.bertoncelj.wildflysingletonservice:wildfly-singleton-service 1.1.0 -...

org.wildfly.core:wildfly-cli (2.0.0.beta6), org.wildfly.core:wildfly-core-dist (2.0.0.beta6) +16 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.beta6)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-cli 2.0.0.beta6 - org.wildfly.core:wildfly-core-dist 2.0.0.beta6 -...

org.wildfly.core:wildfly-cli (2.0.0.beta3), org.wildfly.core:wildfly-core-dist (2.0.0.beta3) +16 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.0.0.beta3)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-cli 2.0.0.beta3 - org.wildfly.core:wildfly-core-dist 2.0.0.beta3 -...

ch.acanda.maven:code-analysis-maven-plugin (>=1.6.0, <=1.14.0), net.sourceforge.pmd:pmd-cli (>=7.0.0, <=7.9.0) +3 more potentially affected by CVE-2025-23215 via net.sourceforge.pmd:pmd-designer (>=7.0.0, <=7.2.0)

net.sourceforge.pmd:pmd-designer MAVEN version =7.0.0, =1.6.0, =7.0.0, =7.0.0, =2.0.0, =2.0.0, =3.0.3 Source cves: CVE-2025-23215 Source advisory: OSV:GHSA-88M4-H43F-WX84...

ch.acanda.maven:code-analysis-maven-plugin (>=1.6.0, <=1.14.0), net.sourceforge.pmd:pmd-cli (>=7.0.0, <=7.9.0) +3 more potentially affected by CVE-2025-23215 via net.sourceforge.pmd:pmd-designer (>=7.0.0, <=7.2.0)

net.sourceforge.pmd:pmd-designer MAVEN version =7.0.0, =1.6.0, =7.0.0, =7.0.0, =2.0.0, =2.0.0, =3.0.3 Source cves: CVE-2025-23215 Source advisory: SNYK:JAVA-NETSOURCEFORGEPMD-8685053...

Malicious code in cli-docs-site (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli

...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Fortinet Fortiproxy

ScaryByte R&D PoC for CVE-2024-55591 A comprehensive all-in...

org.apache.hive:hive-cli (0.8.0), org.apache.hive:hive-contrib (0.8.0) +4 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (0.8.0)

org.apache.hive:hive-exec MAVEN version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - org.apache.hive:hive-cli 0.8.0 - org.apache.hive:hive-contrib 0.8.0 - org.apache.hive:hive-hbase-handler 0.8....