Important: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

ALSA-2026:58938 Important: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

GLSA-202608-22 : needrestart: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-22 needrestart: Multiple vulnerabilities Multiple vulnerabilities have been discovered in needrestart. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block...

Important: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

MAL-2026-14385 Malicious code in hydration-dim-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3659ec02e8317602c089b822a4a0533bee515d9666d07fdaf3cdf8b315a46147 On import, dist/index.mjs verifies a SHA-256 digest of a bundled Linux x8664 ELF at dist/internal/calc.dat, chmods it to 0755, and spawns it detached...

Malicious code in svelte-dim-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1857f7f4957bdb18eb0d5a997d957a38b825b62660f16d6a981232794cc10af0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14386 Malicious code in svelte-dim-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1857f7f4957bdb18eb0d5a997d957a38b825b62660f16d6a981232794cc10af0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in hydration-dim-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3659ec02e8317602c089b822a4a0533bee515d9666d07fdaf3cdf8b315a46147 On import, dist/index.mjs verifies a SHA-256 digest of a bundled Linux x8664 ELF at dist/internal/calc.dat, chmods it to 0755, and spawns it detached...

Malicious code in @sdgdfgdfhhhfd/multiviewr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2d548769641b2114a424739448d9df85d67cc176e694c6ff34ede446082b76 This package publishes a MetaMask snap that derives BIP44 entropy for coinType 60 Ethereum and transmits the resulting privateKey, publicKey and...

MAL-2026-14383 Malicious code in @sdgdfgdfhhhfd/multiviewr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2d548769641b2114a424739448d9df85d67cc176e694c6ff34ede446082b76 This package publishes a MetaMask snap that derives BIP44 entropy for coinType 60 Ethereum and transmits the resulting privateKey, publicKey and...

Malicious code in @sdgdfgdfhhhfd/chainvista (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf04f8e698eac423b3ba255617c60c9167b4b3453b7d73966ad62b02e0695a1 This MetaMask Snap derives BIP44 entropy for Ethereum coinType 60, Bitcoin 0, Solana 501, Cosmos 118, and Testnet 1 and POSTs the raw privateKey,...

MAL-2026-14382 Malicious code in @sdgdfgdfhhhfd/chainvista (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf04f8e698eac423b3ba255617c60c9167b4b3453b7d73966ad62b02e0695a1 This MetaMask Snap derives BIP44 entropy for Ethereum coinType 60, Bitcoin 0, Solana 501, Cosmos 118, and Testnet 1 and POSTs the raw privateKey,...

CVE-2026-59322

CVE-2026-59322...

EUVD-2026-64635

The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, allowing unauthenticated attackers to create a new administrator account and gain a logged-in administrator session, leading to full site takeover...

CVE-2026-13598

CVE-2026-13598 affects the RestrictMate WordPress plugin in versions prior to 1.3.0 . The root cause is that the plugin does not restrict the user role supplied during account registration, enabling an unauthenticated attacker to create a new administrator account and immediately obtain a logged-...

MAL-2026-14359 Malicious code in internallib_v902 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a70573af9e288e99418e904fac717ad03d8ed270aaa9e739e42d9ec1dac962 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in internallib_v902 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a70573af9e288e99418e904fac717ad03d8ed270aaa9e739e42d9ec1dac962 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14357 Malicious code in @postman-cse/okta-aio-linux-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a2f9288ce6a37525823a4f4d41e8a4aaeaea4b0c6e18e6a356bd9d6f49162e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @postman-cse/okta-aio-linux-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a2f9288ce6a37525823a4f4d41e8a4aaeaea4b0c6e18e6a356bd9d6f49162e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in kelly-sizing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede654bccc4eb022f9faa5ceb79107da8ad0b1950db970b62de9771ec11428c4 [email protected] ships a postinstall script install-check.cjs that fetches a JSON config from...