1990 matches found
MAL-2025-18725 Malicious code in dr-service-ecosystem (npm)
The package dr-service-ecosystem was found to contain malicious code...
MAL-2025-37994 Malicious code in utopia-ecosystem-csh952-project (npm)
The package utopia-ecosystem-csh952-project was found to contain malicious code...
MAL-2025-19191 Malicious code in ecosystem-ant-mrn019-project (npm)
The package ecosystem-ant-mrn019-project was found to contain malicious code...
MAL-2025-19192 Malicious code in ecosystem-butterfly-zeu344-project (npm)
The package ecosystem-butterfly-zeu344-project was found to contain malicious code...
MAL-2025-27987 Malicious code in oak-ecosystem-dsr819-project (npm)
The package oak-ecosystem-dsr819-project was found to contain malicious code...
MAL-2025-22436 Malicious code in hill-ecosystem-kdd949-project (npm)
The package hill-ecosystem-kdd949-project was found to contain malicious code...
MAL-2025-22490 Malicious code in hollow-ecosystem-rth157-project (npm)
The package hollow-ecosystem-rth157-project was found to contain malicious code...
MAL-2025-19194 Malicious code in ecosystem-grove-wfv387-project (npm)
The package ecosystem-grove-wfv387-project was found to contain malicious code...
MAL-2025-24871 Malicious code in labyrinth-ecosystem-hdd962-project (npm)
The package labyrinth-ecosystem-hdd962-project was found to contain malicious code...
MAL-2025-19199 Malicious code in ecosystem-mountain-fql199-project (npm)
The package ecosystem-mountain-fql199-project was found to contain malicious code...
MAL-2025-19206 Malicious code in ecosystem-vortex-vda657-project (npm)
The package ecosystem-vortex-vda657-project was found to contain malicious code...
MAL-2025-27503 Malicious code in night_akr3h_os9hy_serenade (npm)
The package nightakr3hos9hyserenade was found to contain malicious code...
Moderate: Red Hat Security Advisory: Updated 7.1 container image is now available in the Red Hat Ecosystem Catalog
Updated rhceph-7.1 container image is now available in the Red Hat Ecosystem Catalog. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support...
@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +18 more potentially affected by CVE-2025-54793 via astro (>=5.2.1, <=5.12.6)
astro NPM version =5.2.1, =0.0.1, =1.0.0, =1.25.426-4, =0.6.2, =0.0.0-dev-20250414184926, =0.0.1, =0.0.1, =2.1.22, =1.0.3, =0.1.0, =0.3.19, =0.2.1, =0.4.0 and more Source cves: CVE-2025-54793 Source advisory: OSV:GHSA-CQ8C-XV66-36GW...
@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +45 more potentially affected by CVE-2025-54793 via @astrojs/internal-helpers (>=0.6.1, <=0.7.0)
@astrojs/internal-helpers NPM version =0.6.1, =0.0.1, =1.0.0, =12.2.4, =0.12.11, =6.2.1, =4.1.1, =6.2.3, =9.1.3, =8.1.2, =0.1.0, =0.1.0, =1.0.5, =1.25.426-4, =0.0.9, =1.3.0, =1.3.4 and more Source cves: CVE-2025-54793 Source advisory: SNYK:JS-ASTROJSINTERNALHELPERS-11508621...
Malicious Go, npm Packages Deliver Cross-Platform Malware, Trigger Remote Data Wipes
Cybersecurity researchers have discovered a set of 11 malicious Go packages that are designed to download additional payloads from remote servers and execute them on both Windows and Linux systems. "At runtime the code silently spawns a shell, pulls a second-stage payload from an interchangeable...
Privacy Risk Predictions Based on Fundamental Understanding of Personal Data and an Evolving Threat Landscape
It is difficult for individuals and organizations to protect personal information without a fundamental understanding of relative privacy risks. By analyzing over 5,000 empirical identity theft and fraud cases, this research identifies which types of personal data are exposed, how frequently...
Gang Wars: Breaking Trust Among Cyber Criminals
Gang Wars: Breaking Trust Among Cyber Criminals By John Fokker and Jambul Tologonov · August 5, 2025 Introduction In the final, unforgettable scene of the film Reservoir Dogs , a group of criminals — once united by a common goal — stand in a Mexican standoff, guns drawn, hearts pounding. Suspicio...
Attractive Metadata Attack: Inducing LLM Agents to Invoke Malicious Tools
Large language model LLM agents have demonstrated remarkable capabilities in complex reasoning and decision-making by leveraging external tools. However, this tool-centric paradigm introduces a previously underexplored attack surface: adversaries can manipulate tool metadata -- such as names,...
