MAL-2025-664 Malicious code in google.kythe (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfd92576cb52e3439544b9c66be7914a1f7326c8ac3ab1ab692d694ae00d5806 Any computer that has this package installed or running should be considered...

Malicious code in ruby-typeprof (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in teswewewewted (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in waseem987 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in admission-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in trigger-gitlab-pipeline (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-677 Malicious code in old-celo-base (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d16d8623e169f195cbb3deeebd0e37b8e6ddd13cfdd5a9b2ece072f3e0170a1b Any computer that has this package installed or running should be considered...

MAL-2025-666 Malicious code in incomesample (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in interview-code-challenge-full-stack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

No need to RSVP: a closer look at the Tria stealer campaign

Introduction Since mid-2024, we've observed a malicious Android campaign leveraging wedding invitations as a lure to social-engineer victims into installing a malicious Android app APK, which we have named "Tria Stealer" after unique strings found in campaign samples. The primary targets of the...

Zoom Workplace 安全漏洞

Zoom Workplace App for Linux is a Linux application for enterprise communication and collaboration. A denial of service vulnerability exists in Zoom Workplace App for Linux, which stems from the application failing to properly handle specific network requests. An attacker could exploit the...

Malicious code in @komoot/kvstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 69080cf029fa20c98da2bad77409a3d11fedade172f91af674b8161e64755928 The OpenSSF Package Analysis project identified '@komoot/kvstore' @ 5.5.6 npm as malicious. It is considered malicious because: - The package...

Malicious code in digitalexp-datasource-definitions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36663c1c097e4ad0179af75313622f87a6e8b4c1ccd10cf2d93e5a505e4c2985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()

...

Active Exploitation: New Aquabot Variant Phones Home

...

Malicious code in gatsby-theme-tinker-tailor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5df1c0054184f09396ef18554ff586b8264bd0fd8bfb34db6eb37fb5bcf37fe4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-22315 IBM Fusion improper communication restriction

IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker who gains access to a Fusion container to establish an external network connection...

CVE-2024-28786 IBM QRadar SIEM information disclosure

IBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could be obtained by an unauthorized actor using man in the middle techniques...

Unlock the Boardroom with Cyber Risk: How the Qualys Enterprise TruRisk™ Platform Empowers CISOs

The Changing Landscape for CISOs " If you can't measure it, you can't manage it." - Peter Drucker This timeless adage by Drucker resonates deeply in today's digital era, where managing cyber risks has become a business-critical priority. According to a recent survey from Splunk, Today, nearly 50%...

Malicious code in dummy-loosesight-gc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f78553519ec74b4ac5b242e553f94941b613be837aafdbfebf10f45f36dbdad5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...