1154 matches found
MAL-2025-46133 Malicious code in sport-interior-service (npm)
The package sport-interior-service was found to contain malicious code...
Malicious code in unlimited-fortnite-v-bucks-and-skins-dlzldzl (npm)
The package unlimited-fortnite-v-bucks-and-skins-dlzldzl was found to contain malicious code...
Malicious code in vortex-equinox-development-ultra (npm)
The package vortex-equinox-development-ultra was found to contain malicious code...
MAL-2025-42776 Malicious code in @teamteanpm2024/eligendi-voluptas-hic (npm)
The package @teamteanpm2024/eligendi-voluptas-hic was found to contain malicious code...
MAL-2025-43328 Malicious code in @zalastax/nolb-lion-lib-1 (npm)
The package @zalastax/nolb-lion-lib-1 was found to contain malicious code...
MAL-2025-42190 Malicious code in @auro-formkit/config (npm)
The package @auro-formkit/config was found to contain malicious code...
Security update for cloud-init
This update for cloud-init fixes the following issues: Update to version 25.1.3: CVE-2024-6174: Unpriveleged user could trigger hotplug-hook commands bsc1245403. None security fixes: Rebase cloud-init to 24.4 or higher bsc1239715, jscPED-8680. Fixed cloud-init --debug status bsc1228414. Using...
SUSE CVE-2025-40779
If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the kea-dhcp4 process will abort with an assertion failure. This happens only if the client request is unicast directly to Kea; broadcast messages do not cause the problem...
CVE-2025-40779
If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the kea-dhcp4 process will abort with an assertion failure. This happens only if the client request is unicast directly to Kea; broadcast messages do not cause the problem...
CVE-2025-40779 Kea crash upon interaction between specific client options and subnet selection
If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the kea-dhcp4 process will abort with an assertion failure. This happens only if the client request is unicast directly to Kea; broadcast messages do not cause the problem...
Secrets Found. Owners Identified. Issues Fixed.
Wiz closes the loop on exposed secrets with blast radius context, ownership intelligence, and actionable, AI-powered fixes...
CVE-2025-38590 net/mlx5e: Remove skb secpath if xfrm state is not found
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Remove skb secpath if xfrm state is not found Hardware returns a unique identifier for a decrypted packet's xfrm state, this state is looked up in an xarray. However, the state might have been freed by the time of this...
Malicious code in spinach-pulsar-mttw (npm)
The package spinach-pulsar-mttw was found to contain malicious code...
Malicious code in romeo-apple-aczo (npm)
The package romeo-apple-aczo was found to contain malicious code...
Malicious code in @libtommy2024/accusamus-dolorum-placeat-eum (npm)
The package @libtommy2024/accusamus-dolorum-placeat-eum was found to contain malicious code...
Malicious code in @malware-test-tapus-soggy-roust-naiks/test-mlw3-tapus-soggy-roust-naiks (npm)
The package @malware-test-tapus-soggy-roust-naiks/test-mlw3-tapus-soggy-roust-naiks was found to contain malicious code...
Malicious code in yaobian-shenduan-fengshui-miben (npm)
The package yaobian-shenduan-fengshui-miben was found to contain malicious code...
Malicious code in callback-cross-env-technosignature-ganymede (npm)
The package callback-cross-env-technosignature-ganymede was found to contain malicious code...