MAL-2025-35 Malicious code in digitalexp-lowcode-runner-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff497f2370d8b4d0bbe77fb825c837cdd2a57a506ec952b2a4e3ba78f273d1b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-56442

Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

MAL-2025-34 Malicious code in @shadowbyte/checkout-telemetry-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3309a46cb7d7602b6b36a782d12752e0b69f409896afc9dd2d9fa4925d65b4a6 The OpenSSF Package Analysis project identified '@shadowbyte/checkout-telemetry-agent' @ 1.0.4 npm as malicious. It is considered malicious...

PT-2025-3286 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue concerns the native APIs not being implemented in the NFC service module. Successful exploitation of this issue may cause features to perform abnormally. Recommendations: At the...

MAL-2025-33 Malicious code in pre-commit-tasks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3f86360c5d5f5979a278474cb95f178bed388a7ce152931eee872318ac5fcd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hts-open-dex-react-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71bfac5a5597cde45524360e887ab5bed0c9e5b8c5337ac9c0728b677529de56 The OpenSSF Package Analysis project identified 'hts-open-dex-react-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-32 Malicious code in hts-open-dex-react-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71bfac5a5597cde45524360e887ab5bed0c9e5b8c5337ac9c0728b677529de56 The OpenSSF Package Analysis project identified 'hts-open-dex-react-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in cursor-shadow-workspace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1c0d7191f53edcbd6d8459f64259fb12d6390bc73fffef3e045a073875f0f91f The OpenSSF Package Analysis project identified 'cursor-shadow-workspace' @ 1.0.2 npm as malicious. It is considered malicious because: - The...

MAL-2025-28 Malicious code in cursor-retrieval (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 62221769774a8b1379cf87256d847c23b08155088aa7dfd78c01d78ffba5e9ba The OpenSSF Package Analysis project identified 'cursor-retrieval' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in electron-builder-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bba9892079dc9a4656f9576903aa20e7d320e80d687cffb7b05a31f1cff127b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

10 Non-tech things you wish you had done after being breached

TL;DR Non-tech aspects to breach follow-up are often overlooked but essential NDAs, supply chain, and third party contracts and obligations should be reviewed Reviewing communication protocols and employee training increases resilience Looking after, and retaining your people improves recovery fo...

Malicious code in hd-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c943ad884cdece67aea759ea5375c3dd587a13ab027bd8c58966ac0d4eb925a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the demon ksmbd.mountd of the file server ksmbd (fs/smb/server/ksmbd_netlink.h) in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the “demon ksmbd.mountd” of the file server “ksmbd” fs/smb/server/ksmbdnetlink.h in the Linux operating system is related to the issue of operations going beyond the buffer in memory when processing IPC responses. Exploiting this vulnerability can allow an attacker to cause a...

PT-2025-30780

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The i2c dw xfer init function requires msgs and msg write idx from the device context to be initialized. A flaw exists because amd i2c dw xfer quirk initializes msgs and msgs num, but no...

PT-2025-30821

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to the NFC subsystem. Specifically, the issue involves setting the tty-disc data field before the NCI device is fully opened, potentially creatin...

SUSE CVE-2024-56540

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery invocation during probe and resume Refactor IPC send and receive functions to allow correct handling of operations that should not trigger a recovery process. Expose ivpusendreceiveinternal, which is...

Malicious code in proton-parking-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 506697cca5654bda57571824a1c769ba976811a08a53a12e057f80fac4a610a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plugin-sitemap-coveo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8beb57037c74f45d85a7de2e8df9f414b56d2cece15a8004db4ebda4d5400ff6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2024-56540

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery invocation during probe and resume Refactor IPC send and receive functions to allow correct handling of operations that should not trigger a recovery process. Expose ivpusendreceiveinternal, which is...

CVE-2024-56540 accel/ivpu: Prevent recovery invocation during probe and resume

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery invocation during probe and resume Refactor IPC send and receive functions to allow correct handling of operations that should not trigger a recovery process. Expose ivpusendreceiveinternal, which is...