CVE-2025-43905

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralizatio...

MAL-2025-6744 Malicious code in nova-ssr-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-5244 Malicious code in angular-intro (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eefd72906fec89738b3a3e6f7891c6990275c5a3c3140dde3cd08f3f3bfc2be Any computer that has this package installed or running should be considered...

MAL-2025-5471 Malicious code in uphold-sdk-javascript-extensions (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5414 Malicious code in hackshack-leaderboard (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5030 Malicious code in cycle-a (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-675 Malicious code in node_package_runner (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2184b9f02eafe0c7718354523c5e27d58e20d2680516093b39bea75dc2795e98 Any computer that has this package installed or running should be considered...

MAL-2025-419 Malicious code in coinbase-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 710b36fc278e57d50e7ce86d489ae5e2da89f2ac58f80653232e0b2f7283e451 The OpenSSF Package Analysis project identified 'coinbase-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-613 Malicious code in ethweb-set (npm)

This package exfiltrates cryptocurrency wallet files to an attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7af171b00090d3b3bfefae279da101b5da3a93390bc9f2cce869bdbc8685cbf Any computer that has this package installed or running should be...

MAL-2025-17 Malicious code in facetec-browser-sdk (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38f356209be66b9759fe0891f0751be720e7d758d002e5fd1541f0c10619f45c Any computer that has this package install...

DEBIAN-CVE-2023-5679

A bad interaction between DNS64 and serve-stale may cause named to crash with an assertion failure during recursive resolution, when both of these features are enabled. This issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through...

EMC Data Domain DD OS Memory Overflow Vulnerability

EMC Data Domain DD OS and EMC Data Domain Virtual Edition are both products of EMC Corporation.EMC Data Domain DD OS is a deduplication operating system.EMC Data Domain Virtual Edition is a deduplication storage device. A memory overflow vulnerability exists in EMC Data Domain DD OS and EMC Data...