MAL-2025-24871 Malicious code in labyrinth-ecosystem-hdd962-project (npm)

The package labyrinth-ecosystem-hdd962-project was found to contain malicious code...

MAL-2025-19196 Malicious code in ecosystem-iris-eab640-project (npm)

The package ecosystem-iris-eab640-project was found to contain malicious code...

MAL-2025-19200 Malicious code in ecosystem-opal-lxo696-project (npm)

The package ecosystem-opal-lxo696-project was found to contain malicious code...

Malicious code in aroma-ecosystem-gsn760-project (npm)

The package aroma-ecosystem-gsn760-project was found to contain malicious code...

Malicious code in symbcs (npm)

The package symbcs was found to contain malicious code...

brick (0.0.0), bud (>=0.0.0, <=0.1.2) +16 more potentially affected by unknown CVE via first-val (0.0.0)

first-val NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on first-val and may be impacted: - brick 0.0.0 - bud =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =0.1.0, =0.0.0, =3.1.1, =0.0.0, =0.0.4, =0.0.0, =0.0.2 and more Source cves:...

MAL-2025-22436 Malicious code in hill-ecosystem-kdd949-project (npm)

The package hill-ecosystem-kdd949-project was found to contain malicious code...

MAL-2025-22490 Malicious code in hollow-ecosystem-rth157-project (npm)

The package hollow-ecosystem-rth157-project was found to contain malicious code...

MAL-2025-23017 Malicious code in iguana-ecosystem-iuc520-project (npm)

The package iguana-ecosystem-iuc520-project was found to contain malicious code...

MAL-2025-19204 Malicious code in ecosystem-uranium-fsi579-project (npm)

The package ecosystem-uranium-fsi579-project was found to contain malicious code...

MAL-2025-19199 Malicious code in ecosystem-mountain-fql199-project (npm)

The package ecosystem-mountain-fql199-project was found to contain malicious code...

MAL-2025-27503 Malicious code in night_akr3h_os9hy_serenade (npm)

The package nightakr3hos9hyserenade was found to contain malicious code...

MAL-2025-14843 Malicious code in aroma-ecosystem-gsn760-project (npm)

The package aroma-ecosystem-gsn760-project was found to contain malicious code...

MAL-2025-37291 Malicious code in tulip-ecosystem-qnu680-project (npm)

The package tulip-ecosystem-qnu680-project was found to contain malicious code...

MAL-2025-19197 Malicious code in ecosystem-jellyfish-umz952-project (npm)

The package ecosystem-jellyfish-umz952-project was found to contain malicious code...

MAL-2025-19192 Malicious code in ecosystem-butterfly-zeu344-project (npm)

The package ecosystem-butterfly-zeu344-project was found to contain malicious code...

MAL-2025-37994 Malicious code in utopia-ecosystem-csh952-project (npm)

The package utopia-ecosystem-csh952-project was found to contain malicious code...

Moderate: Red Hat Security Advisory: Updated 7.1 container image is now available in the Red Hat Ecosystem Catalog

Updated rhceph-7.1 container image is now available in the Red Hat Ecosystem Catalog. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +19 more potentially affected by CVE-2025-54793 via astro (>=5.2.1, <=5.12.6)

astro NPM version =5.2.1, =0.0.1, =1.0.0, =1.0.0, =1.25.426-4, =0.6.2, =0.0.0-dev-20250414184926, =0.0.1, =0.0.1, =2.1.22, =1.0.3, =0.1.0, =0.3.19, =0.3.20 - astro-theme-stalux 1.0.0 and more Source cves: CVE-2025-54793 Source advisory: OSV:GHSA-CQ8C-XV66-36GW...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +54 more potentially affected by CVE-2025-54793 via @astrojs/internal-helpers (>=0.6.1, <=0.7.0)

@astrojs/internal-helpers NPM version =0.6.1, =0.0.1, =1.0.0, =12.2.4, =0.12.11, =6.2.1, =4.1.1, =6.2.3, =9.1.3, =8.1.2, =0.1.0, =0.1.0, =1.0.5, =1.25.426-4, =0.0.9, =1.3.0, =1.3.4 and more Source cves: CVE-2025-54793 Source advisory: SNYK:JS-ASTROJSINTERNALHELPERS-11508621...