SUSE CVE-2026-53053

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix clonealias to use the original device's devid Currently clonealias assumes first argument pdev is always the original device pointer. This function is called by pciforeachdmaalias which based on topology decides to...

Malicious code in slice.js (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

Malicious code in @uipath/packager-tool-workflowcompiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba55a8cfb928dc9076aa7df6b3b8d5ca1f93f4f191e6f46b4dac2824d2e36af1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47316 Malicious code in graphql-sequelize-teselagen (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61bd0f16d8ac09ad8d170113bc0bc5ed2cbba4f9d406fa9a852cface0b40be37 Any computer that has this package installed or running should be considered fully compromised. All...