MAL-2025-21455 Malicious code in git-mirror-client (npm)

The package git-mirror-client was found to contain malicious code...

MAL-2025-21452 Malicious code in git-cliff-win32-arm64 (npm)

The package git-cliff-win32-arm64 was found to contain malicious code...

Malicious code in git-mirror-client (npm)

The package git-mirror-client was found to contain malicious code...

Malicious code in git-ps (npm)

The package git-ps was found to contain malicious code...

Malicious code in git-cliff-win32-x64 (npm)

The package git-cliff-win32-x64 was found to contain malicious code...

MAL-2025-21453 Malicious code in git-cliff-win32-x64 (npm)

The package git-cliff-win32-x64 was found to contain malicious code...

Malicious code in git-lg (npm)

The package git-lg was found to contain malicious code...

Malicious code in react-airbnb-prettier (npm)

The package react-airbnb-prettier was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 8dfaae080b90705a47740e1ced1edacf0110db947f0f26fdd35e2805a2886d37 This package installs a dependency hosted on a custom domain that...

Malicious code in git-ocr (npm)

The package git-ocr was found to contain malicious code...

MAL-2025-26779 Malicious code in mozaik-ext-git (npm)

The package mozaik-ext-git was found to contain malicious code...

MAL-2025-21458 Malicious code in git-ps (npm)

The package git-ps was found to contain malicious code...

Malicious code in deploytool-git-push (npm)

The package deploytool-git-push was found to contain malicious code...

Malicious code in git-pl (npm)

The package git-pl was found to contain malicious code...

MAL-2025-21457 Malicious code in git-pl (npm)

The package git-pl was found to contain malicious code...

MAL-2025-21454 Malicious code in git-lg (npm)

The package git-lg was found to contain malicious code...

MAL-2025-21456 Malicious code in git-ocr (npm)

The package git-ocr was found to contain malicious code...

git: Fix of CVE-2025-46835

CVE-2025-46835: fix vulnerability where Git GUI can create and overwrite arbitrary writable files...

CLSA-2025-1755184971 git: Fix of CVE-2025-46835

CVE-2025-46835: fix vulnerability where Git GUI can create and overwrite arbitrary writable files...

Oracle Linux 7 : git (ELSA-2025-11688)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-11688 advisory. 1.8.3.1-25.0.1 - Fixed CVE-2025-48384 Orabug: 38234220 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials

Summary The steam-workshop-deploy github action does not exclude the .git directory when packaging content for deployment and provides no built-in way to do so. If a .git folder exists in the target directory e.g., due to a local Git repo, custom project structure, or via the actions/checkout...