MAL-2025-38669 Malicious code in vue-design-system (npm)

The package vue-design-system was found to contain malicious code...

MAL-2025-40341 Malicious code in yarn-design-system-rc-slider (npm)

The package yarn-design-system-rc-slider was found to contain malicious code...

MAL-2025-40337 Malicious code in yarn-design-system-ag-grid (npm)

The package yarn-design-system-ag-grid was found to contain malicious code...

Malicious code in px-colors-design (npm)

The package px-colors-design was found to contain malicious code...

Malicious code in snap-design-system (npm)

The package snap-design-system was found to contain malicious code...

Malicious code in yarn-design-system-swiper (npm)

The package yarn-design-system-swiper was found to contain malicious code...

Malicious code in design-implementation (npm)

The package design-implementation was found to contain malicious code...

Malicious code in yarn-design-system-icons (npm)

The package yarn-design-system-icons was found to contain malicious code...

MAL-2025-40338 Malicious code in yarn-design-system-icons (npm)

The package yarn-design-system-icons was found to contain malicious code...

MAL-2025-33473 Malicious code in snap-design-system (npm)

The package snap-design-system was found to contain malicious code...

MAL-2025-7987 Malicious code in @healthbyro/design-tokens (npm)

The package @healthbyro/design-tokens was found to contain malicious code...

MAL-2025-7121 Malicious code in @bmw-ds/components (npm)

The package @bmw-ds/components was found to contain malicious code...

MAL-2025-18322 Malicious code in design-guide (npm)

The package design-guide was found to contain malicious code...

MAL-2025-40344 Malicious code in yarn-design-system-swiper (npm)

The package yarn-design-system-swiper was found to contain malicious code...

MAL-2025-40340 Malicious code in yarn-design-system-jsdoc-template (npm)

The package yarn-design-system-jsdoc-template was found to contain malicious code...

MAL-2025-6871 Malicious code in @azix058/design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00076e3fa2882cf70c07ddb3715929161c6cd4253e088b91f38c06d9612e5edc The OpenSSF Package Analysis project identified '@azix058/design-system' @ 10.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in @azix058/design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00076e3fa2882cf70c07ddb3715929161c6cd4253e088b91f38c06d9612e5edc The OpenSSF Package Analysis project identified '@azix058/design-system' @ 10.0.0 npm as malicious. It is considered malicious because: - The...

DEBIAN-CVE-2025-8671

A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service DoS. By opening streams and then rapidly triggering the serv...

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2025-54207

InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...