23 matches found
CLSA-2026-1785952964 TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 14 CVEs. Fixed in 6.2.15-tuxcare.3...
CLSA-2026-1785932316 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 3 CVEs. Fixed in 6.1.21-tuxcare.8...
CLSA-2026-1781571271 TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 10 CVEs. Fixed in 6.1.21-tuxcare.7...
CLSA-2026-1779410898 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.1.21-tuxcare.6...
CLSA-2026-1779151634 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 2 CVEs. Fixed in 6.1.21-tuxcare.4...
CLSA-2026-1778633134 TuxCare security update for 35 packages (1 CVE)
TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.10...
CLSA-2026-1777250296 TuxCare security update for 35 packages (3 CVEs)
TuxCare rebuilt 35 packages to address 3 CVEs. Fixed in 8.5.100-tuxcare.9...
CLSA-2026-1776818211 TuxCare security update for 35 packages (1 CVE)
TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.8...
CLSA-2026-1775867594 TuxCare security update for 5 packages (4 CVEs)
TuxCare rebuilt 5 packages to address 4 CVEs. Fixed in 3.12.3-tuxcare.1...
CLSA-2025-1765411679 TuxCare security update for 35 packages (2 CVEs)
TuxCare rebuilt 35 packages to address 2 CVEs. Fixed in 8.5.100-tuxcare.4...
CLSA-2025-1761005194 TuxCare security update for 35 packages (1 CVE)
TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.3...
CLSA-2025-1751500955 TuxCare security update for 35 packages (10 CVEs)
TuxCare rebuilt 35 packages to address 10 CVEs. Fixed in 8.5.100.tuxcare.1...
Malicious code in @wagni_bot/wagni (npm)
The npm package @wagnibot/wagni is a supply-chain credential stealer disguised as a the campaign's own namesake handle SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a...
Malicious code in @wagni_bot/polygon (npm)
The npm package @wagnibot/polygon is a supply-chain credential stealer disguised as a Polygon SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycle hook...
MAL-2026-11110 Malicious code in @wagni_bot/eth (npm)
The npm package @wagnibot/eth is a supply-chain credential stealer disguised as a Ethereum SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycle hook...
MAL-2026-11112 Malicious code in @wagni_bot/metamask (npm)
The npm package @wagnibot/metamask is a supply-chain credential stealer disguised as a MetaMask SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycle hook...
MAL-2026-11113 Malicious code in @wagni_bot/opensea (npm)
The npm package @wagnibot/opensea is a supply-chain credential stealer disguised as a OpenSea SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycle hook...
MAL-2026-6774 Malicious code in @marketfront/devtoolsloader (npm)
The @marketfront/devtoolsloader package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...
