Malicious code in parallely (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a862cdceb2998828aba8de0d4a672b86a2c22dff073356e5acd89e894aced56 The npm package name parallely typosquats concurrently: package.json advertises the concurrently repository, author, and funding while shipping...

EUVD-2026-27872

gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging. If -listen is given a value without an explicit host e.g. :8080, or -port is used, gopls will listen on 0.0.0.0. As a result, users might inadvertently cause gopls to bind 0.0.0.0. This...

EUVD-2001-0701

Malware in sbrugna...

Mattermost Desktop App Security Vulnerability

Mattermost Desktop App is a messaging desktop application from Mattermost USA. A security vulnerability exists in Mattermost Desktop App version 5.7.0 and earlier, which stems from an inability to disable certain Electron debugging flags, which allows bypassing TCC restrictions...

PT-2019-14602 · Samsung · Samsungtts

Name of the Vulnerable Software and Affected Versions: SamsungTTS versions prior to 3.0.02.7 SamsungTTS version 3.0.00.101 Description: The issue allows a local attacker to escalate privileges, for example, to system privileges. It is related to the handling of debugging flags by the package...