Malicious code in cross-env-blitz-bunyan-stream (npm)

The package cross-env-blitz-bunyan-stream was found to contain malicious code...

Malicious code in cross-env-darkenergy-zenith-palynology (npm)

The package cross-env-darkenergy-zenith-palynology was found to contain malicious code...

Malicious code in envconfig-cross-env-ariel-enceladus (npm)

The package envconfig-cross-env-ariel-enceladus was found to contain malicious code...

Malicious code in funbox-frontend-env-gulp (npm)

The package funbox-frontend-env-gulp was found to contain malicious code...

Malicious code in slm-env-unity3dball-v0 (npm)

The package slm-env-unity3dball-v0 was found to contain malicious code...

Malicious code in cross-env-superagent-umbriel-mongodb (npm)

The package cross-env-superagent-umbriel-mongodb was found to contain malicious code...

MAL-2025-21046 Malicious code in funbox-frontend-env-gulp (npm)

The package funbox-frontend-env-gulp was found to contain malicious code...

Malicious code in hubot-frostedio-env (npm)

The package hubot-frostedio-env was found to contain malicious code...

MAL-2025-22771 Malicious code in hubot-frostedio-env (npm)

The package hubot-frostedio-env was found to contain malicious code...

MAL-2025-16456 Malicious code in callback-cross-env-technosignature-ganymede (npm)

The package callback-cross-env-technosignature-ganymede was found to contain malicious code...

MAL-2025-19682 Malicious code in envconfig-cross-env-ariel-enceladus (npm)

The package envconfig-cross-env-ariel-enceladus was found to contain malicious code...

Alibaba Cloud Linux 3 : 0135: python-requests (ALINUX3-SA-2025:0135)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2025:0135 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-47081: Requests is a HTTP library. Due to ...

Security Bulletin: Kafka client library upgraded to kafka-clients-3.9.1

Summary Kafka client library upgraded to kafka-clients-3.9.1. Vulnerability Details CVEID:CVE-2024-31141 DESCRIPTION: Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka Clients accept configuration data for...

MAL-2025-6691 Malicious code in actions-set-env-vars (npm)

The package communicates with a domain associated with malicious activity...

SUSE-SU-2025:02499-1 Security update 5.0.5 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation bsc1244561 - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 - CVE-2024-38824: Fixed directory...

OESA-2025-1828 resource-agents security update

Resource agent is a standardized interface for a cluster resource. In translates a standard set of operations into steps specific to the resource or application, and interprets their results as success or failure. Security Fixes: Requests is a HTTP library. Due to a URL parsing issue, Requests...

OESA-2025-1825 python-requests security update

Requests is an HTTP library, written in Python, as an alternative to Python's builtin urllib2 which requires work even method overrides to perform basic tasks. Features of Requests: - GET, HEAD, POST, PUT, DELETE Requests: + HTTP Header Request Attachment. + Data/Params Request Attachment. +...

OESA-2025-1711 resource-agents security update

Resource agent is a standardized interface for a cluster resource. In translates a standard set of operations into steps specific to the resource or application, and interprets their results as success or failure. Security Fixes: Requests is a HTTP library. Due to a URL parsing issue, Requests...

Malicious code in env-info-checker-kyy3w4fiurevd8uy43wfre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d6fb3feadb029e83e642c54a8ffc29782d65e981a2bd769dc972463231215b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5552 Malicious code in env-info-checker-kyy3w4fiurevd8uy43wfre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d6fb3feadb029e83e642c54a8ffc29782d65e981a2bd769dc972463231215b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...