Malicious code in mcp-polymarket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c93eadc60da9cb188762b7190a7c6b48a5eaa9766f23d7515b944c05eb3f005 The package mcp-polymarket was found to contain malicious code. Source: ghsa-malware 41eb8c2fd8bee675d7893ba16ddd2f6fd03730818520e928c0320ed2a0306602...

Malicious code in react-svgs-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081ba740ebfdae5dfc4f53bf53b7658227f6fc78a9c8866727d95d2467991f3e The package react-svgs-helper was found to contain malicious code. Source: ghsa-malware...

SUSE-SU-2025:21074-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment bsc1234863. - CVE-2024-57891: schedext: Fix invalid irq restore in...

Malicious code in @vleo-dev/a11y-js-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7b4a5742b82956cf1632de9f435f824ac60651023bec86e0f12d9689dc5b2c The package @vleo-dev/a11y-js-service was found to contain malicious code. Source: ghsa-malware...

SUSE CVE-2025-43427

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

SUSE CVE-2025-62626

Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially resulting in the consumption of insufficiently random values...

Malicious code in @axinom/mosaic-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7168f2a1e0e25128412330dd5022d955509346523f45c453d18e9205eb38b678 The package @axinom/mosaic-cli was found to contain malicious code. Source: ghsa-malware...

Malicious code in @browserbasehq/mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd1d0d39e38fcabc19d825aaf056705056728c59701b5fe8cdf5863839a072b3 The package @browserbasehq/mcp was found to contain malicious code. Source: ghsa-malware...

podman security update

5.6.0-6.0.1 - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount Orabug: 36234694 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.6.0-6 - update to the latest content of...

Linux Distros Unpatched Vulnerability : CVE-2025-62525

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, local users could read and write arbitrary kernel memory using...

AMD StoreMI Default Privilege Misconfiguration Vulnerability

AMD StoreMI is an intelligent storage management technology developed by AMD that automatically optimizes the location of data storage to improve system performance by combining the benefits of solid state drives SSDs and mechanical hard drives HDDs. AMD StoreMI suffers from a default privilege...

AMD CPU Entropy Mishandling Vulnerability

AMD CPUs are a family of CPUs from AMD. AMD CPUs suffer from an entropy mishandling vulnerability, no details of the vulnerability are provided at this time...

Malicious code in @kong/spec-renderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb95018d12b664fc03fb69a58512ad0f479a61403b520ae8b325153404f3e14b The package @kong/spec-renderer was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191426 Malicious code in simplejsonform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d512e223b9a2375fd46539f1b0434e092f755c299f20b1d054c538228d266436 The package simplejsonform was found to contain malicious code. Source: ghsa-malware fd81fbb7b9cb8cfc5e4444da9cd2d18ed54ec4b7bb741f0ad95a56ce29a5edd0...

Malicious code in react-data-to-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1955002d61deae12965aabd7f49319a8cd75b916377002d839d153e5fd19d8e6 The package react-data-to-export was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191055 Malicious code in @thedelta/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf18ec0224183e37e3d7ce155ce74e57988e6cdf5c817d06f892ad4b22a7546 The package @thedelta/eslint-config was found to contain malicious code. Source: ghsa-malware...

Malicious code in @thedelta/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf18ec0224183e37e3d7ce155ce74e57988e6cdf5c817d06f892ad4b22a7546 The package @thedelta/eslint-config was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191110 Malicious code in inmaa-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a71a1334fb3a18076752ed1d28b6fa7cc43dc4f4b612d102624e00dcdf53cb The package inmaa-map was found to contain malicious code. Source: ghsa-malware 56eac0e53cd10844280484abbd6456539bce6cd1e970a33a3707d49612ac8a88 Any...

Malicious code in @pruthvi21/use-debounce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd8d11cd0a3abe19ac13cfc1b3bf6a4f1388ac2c6a404090a1264d32de390e8 The package @pruthvi21/use-debounce was found to contain malicious code. Source: ghsa-malware...

Malicious code in electron-volt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7fc79b9e614ad1f38d5c44d7ab287b6adc50f1504b6918a98c6367c360796a The package electron-volt was found to contain malicious code. Source: ghsa-malware 05e20afdf3328e10c94e09a40e27aefc49eda68b38a4c40b917b749a0a12e1cd...