Malicious code in ton-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac83c8d18317fa7c1f2fecc782c419c88d798a4e02d25874898824c47e74f1ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alex_cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f6cd2140bf96edc2ad2da872d299602ba217c2f276b0e4c927b42e72493c22d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in axelar-presets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a0ba6bc89d6d2aad9c955f0057c3c7085448df4c3e5972e6253b3c13cbc946d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in onchain-summer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cfb3627a51e1629c525e521906f38f34f9ba857e21362db797959ce19749cc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deribit-arbitrage-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64bc92786b02e2d413eda2df2dae650fcd3c651e901b32f32ba4fb5c27bbd258 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dinacomgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f881cba5f3535297d10c3adf3f31d24d372d3e0608e962aed7cc4c83c8c24204 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in model-viewer-render-fidelity-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1109626e5ba207b2f14c0b5c9081c8b4dd49932d296464a13921731b5749a51c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in truelayer-for-woocommerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b29c75990176d19762517dd4d6e52e6c8b1f434a2089b4bfc95fca56e7cd0a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PSF-2025-1

The Python standard library functions urllib.parse.urlsplit and urlparse accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in...

Malicious code in addon-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c577c976c628e28178068560e5d64a099c595fddbdc191ec9343ac7ee6149712 Any computer that has this package installed or running should be considered...

openSUSE Security Advisory (SUSE-SU-2025:0285-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in openbet-access-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dd796ac609bd9ccd763f039c5ecfd7fd63b7c76170f3feaba70a4d2148fa881 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Lazarus Group Uses React-Based Admin Panel to Control Global Cyber Attacks

The North Korean threat actor known as the Lazarus Group has been observed leveraging a "web-based administrative platform" to oversee its command-and-control C2 infrastructure, giving the adversary the ability to centrally supervise all aspects of their campaigns. "Each C2 server hosted a...

SUSE-SU-2025:0285-1 Security update for go1.24

This update for go1.24 fixes the following issues: This update ships go1.24rc2 bsc1236217. - CVE-2024-45341: Properly check for IPv6 hosts in URIs bsc1236045 - CVE-2024-45336: Persist header stripping across repeated redirects bsc1236046 - CVE-2025-22865: Avoid panic when parsing partial PKCS1...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.24 (SUSE-SU-2025:0285-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0285-1 advisory. This update ships go1.24rc2 bsc1236217. - CVE-2024-45341: Properly check for IPv6 hosts in URIs...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.23 (SUSE-SU-2025:0280-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0280-1 advisory. - Update to go1.23.5 bsc1229122 - CVE-2024-45341: Properly check for IPv6 hosts in URIs bsc12360...

curl: curl allows SSH connection even if host is not in known_hosts

Summary: Curl does not fail if the SSH host identity cannot be verified due to the host not being included in the .ssh/knownhosts file. This makes using curl to login into an previously unknown ssh host system vulnerable to meddler in the middle attacks. When using key based authentication it wil...

Malicious code in ig-grunt-maven-multi-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ba822293906e2a34cd29d237818bee0b19bbafb28ea1600c9592ac2554d8501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sdk-coin-bcha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a41b6c02dc6baa29b6ae516a437b5a11249d4b4937d56088fa5643e048905d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in social-previews (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fab6484159a8754b4345d5eadcd2182865514fcfa93f939fe2999845cf79a803 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...