CLSA-2026-1785952964 TuxCare security update for org.springframework (14 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 14 CVEs. Fixed in 6.2.15-tuxcare.3...

CLSA-2026-1785932316 TuxCare security update for org.springframework (3 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 3 CVEs. Fixed in 6.1.21-tuxcare.8...

CLSA-2026-1783645398 TuxCare security update for 75 packages (3 CVEs)

TuxCare rebuilt 75 packages to address 3 CVEs. Fixed in 3.0.13-tuxcare.1...

CLSA-2026-1781571271 TuxCare security update for org.springframework (10 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 10 CVEs. Fixed in 6.1.21-tuxcare.7...

CLSA-2026-1779410898 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.1.21-tuxcare.6...

CLSA-2026-1779151634 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 2 CVEs. Fixed in 6.1.21-tuxcare.4...

CLSA-2026-1778633134 TuxCare security update for 35 packages (1 CVE)

TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.10...

CLSA-2026-1778633133 TuxCare security update for com.google.guava (1 CVE)

TuxCare rebuilt 5 com.google.guava packages to address 1 CVE. Fixed in 16.0.1-tuxcare.1...

CLSA-2026-1777250296 TuxCare security update for 35 packages (3 CVEs)

TuxCare rebuilt 35 packages to address 3 CVEs. Fixed in 8.5.100-tuxcare.9...

CLSA-2026-1776818211 TuxCare security update for 35 packages (1 CVE)

TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.8...

CLSA-2026-1775867594 TuxCare security update for 5 packages (4 CVEs)

TuxCare rebuilt 5 packages to address 4 CVEs. Fixed in 3.12.3-tuxcare.1...

CLSA-2026-1774398096 TuxCare security update for com.google.guava (1 CVE)

TuxCare rebuilt 5 com.google.guava packages to address 1 CVE. Fixed in 18.0-tuxcare.1...

CLSA-2026-1773188139 TuxCare security update for com.google.guava (2 CVEs)

TuxCare rebuilt 5 com.google.guava packages to address 2 CVEs. Fixed in 27.1-jre-tuxcare.1...

CLSA-2025-1765411679 TuxCare security update for 35 packages (2 CVEs)

TuxCare rebuilt 35 packages to address 2 CVEs. Fixed in 8.5.100-tuxcare.4...

CLSA-2025-1760313983 TuxCare security update for org.springframework.webflow (2 CVEs)

TuxCare rebuilt 5 org.springframework.webflow packages to address 2 CVEs. Fixed in 2.3.3.RELEASE-tuxcare.1...

CLSA-2025-1761005194 TuxCare security update for 35 packages (1 CVE)

TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.3...

CLSA-2025-1751500955 TuxCare security update for 35 packages (10 CVEs)

TuxCare rebuilt 35 packages to address 10 CVEs. Fixed in 8.5.100.tuxcare.1...

CLSA-2024-1726444801 TuxCare security update for com.google.guava (2 CVEs)

TuxCare rebuilt 5 com.google.guava packages to address 2 CVEs. Fixed in 30.1-jre.tuxcare...

Malicious code in @wagni_bot/wagni (npm)

The npm package @wagnibot/wagni is a supply-chain credential stealer disguised as a the campaign's own namesake handle SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a...

MAL-2026-11112 Malicious code in @wagni_bot/metamask (npm)

The npm package @wagnibot/metamask is a supply-chain credential stealer disguised as a MetaMask SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycle hook...