MAL-2025-34729 Malicious code in tern_from_ts (npm)

The package ternfromts was found to contain malicious code...

MAL-2025-21874 Malicious code in grapesjs-from-doc (npm)

The package grapesjs-from-doc was found to contain malicious code...

MAL-2025-13917 Malicious code in a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk (npm)

The package a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk was found to contain malicious code...

MAL-2025-22365 Malicious code in hello-world-from-lupin-99 (npm)

The package hello-world-from-lupin-99 was found to contain malicious code...

Malicious code in grapesjs-from-doc (npm)

The package grapesjs-from-doc was found to contain malicious code...

Malicious code in title-from-url (npm)

The package title-from-url was found to contain malicious code...

Malicious code in new-al-bum-av-ailable-greetings-from-michigan-the-great-lakes-state-7x9l5-guwkve (npm)

The package new-al-bum-av-ailable-greetings-from-michigan-the-great-lakes-state-7x9l5-guwkve was found to contain malicious code...

Malicious code in hello-world-from-lupin-95 (npm)

The package hello-world-from-lupin-95 was found to contain malicious code...

MAL-2025-27354 Malicious code in new-al-bum-av-ailable-greetings-from-michigan-the-great-lakes-state-7x9l5-guwkve (npm)

The package new-al-bum-av-ailable-greetings-from-michigan-the-great-lakes-state-7x9l5-guwkve was found to contain malicious code...

MAL-2025-36977 Malicious code in title-from-url (npm)

The package title-from-url was found to contain malicious code...

MAL-2025-22364 Malicious code in hello-world-from-lupin-95 (npm)

The package hello-world-from-lupin-95 was found to contain malicious code...

MAL-2025-21366 Malicious code in get-stats-from-planning-file (npm)

The package get-stats-from-planning-file was found to contain malicious code...

Malicious Package

Overview wppostingzon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...

Malicious Package

Overview very-nay is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate legitimate WhatsApp libraries, there is no connection between that organization and this package...

Malicious Package

Overview node-smsk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate legitimate WhatsApp libraries, there is no connection between that organization and this package...

Malicious Package

Overview naya-flore is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate legitimate WhatsApp libraries, there is no connection between that organization and this package...

Malicious Package

Overview @veryflore/disc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate legitimate WhatsApp libraries, there is no connection between that organization and this...

IdMap::from_iter may lead to uninitialized memory being freed on drop

Due to a flaw in the constructor idmap::IdMap::fromiter, ill-formed objects may be created in which the amount of actually initialized memory is less than what is expected by the fields of IdMap. Specifically, the field ids is initialized based on the capacity of the vector values, which is...

CVE-2025-49036

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in octagonwebstudio Premium Addons for KingComposer premium-addons-for-kingcomposer allows PHP Local File Inclusion.This issue affects Premium Addons for KingComposer: from n/a...

USN-7696-1: libssh vulnerabilities

Ronald Crane discovered that libssh incorrectly handled certain base64 conversions. An attacker could use this issue to cause libssh to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2025-4877 Ronald Crane discovered that libssh incorrectly handled the...