PT-2025-36676

This update for perl-YAML-LibYAML fixes the following issues: - Updated to 0.904.0 - Dependency submission for the openQA stack...

Malware in go-dependency-submission

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in maven-dependency-submission-action

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in go-dependency-submission (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa0e3837d434167d18ab0ba251b0ce73d56ed83a0c773df12c8ebd99542f8eaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10880 Malicious code in maven-dependency-submission-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1381f1caf30bbc11135c6f4ffc6634a4cdeaaa63627d583675758c564c38c804 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in maven-dependency-submission-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1381f1caf30bbc11135c6f4ffc6634a4cdeaaa63627d583675758c564c38c804 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4935 Malicious code in npm-dependency-submission-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5ad151e37604b229dbad34a65d41f3ddfeb26db05249d3b5216635b725b7527 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2435 Malicious code in dependency-submission-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 714cd15be545a128db2530153f5c28d6fecd32c664ddf24cfe8a0ac0cae65333 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...