Malicious Package

Overview @exarad/verfuegbarkeitspruefung-vue2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...

Linux Distros Unpatched Vulnerability : CVE-2015-10005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The...

Malicious code in release-it-prettier-nodejs-fornax (npm)

The package release-it-prettier-nodejs-fornax was found to contain malicious code...

MAL-2025-45793 Malicious code in release-it-oscillation-lithosphere-dysonswarm (npm)

The package release-it-oscillation-lithosphere-dysonswarm was found to contain malicious code...

MAL-2025-45794 Malicious code in release-it-prettier-nodejs-fornax (npm)

The package release-it-prettier-nodejs-fornax was found to contain malicious code...

Malicious code in local-release-it-exec-graphql (npm)

The package local-release-it-exec-graphql was found to contain malicious code...

Malicious code in release-it-winston-lightyear-magellan (npm)

The package release-it-winston-lightyear-magellan was found to contain malicious code...

MAL-2025-45057 Malicious code in local-release-it-exec-graphql (npm)

The package local-release-it-exec-graphql was found to contain malicious code...

MAL-2025-43718 Malicious code in celeste-spica-release-it-hydra (npm)

The package celeste-spica-release-it-hydra was found to contain malicious code...

Malicious code in release-it-blazar-warp-avior (npm)

The package release-it-blazar-warp-avior was found to contain malicious code...

MAL-2025-45795 Malicious code in release-it-winston-lightyear-magellan (npm)

The package release-it-winston-lightyear-magellan was found to contain malicious code...

MAL-2025-45792 Malicious code in release-it-blazar-warp-avior (npm)

The package release-it-blazar-warp-avior was found to contain malicious code...

IT threat evolution in Q2 2025. Non-mobile statistics

IT threat evolution in Q2 2025. Non-mobile statistics IT threat evolution in Q2 2025. Mobile statistics The statistics in this report are based on detection verdicts returned by Kaspersky products unless otherwise stated. The information was provided by Kaspersky users who consented to sharing...

VulnCheck KEV: CVE-2017-16237

In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...

Linux Distros Unpatched Vulnerability : CVE-2025-7969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in markdown-it allows Cross-Site Scripting XSS. This...

U.S. Treasury Sanctions DPRK IT-Worker Scheme, Exposing $600K Crypto Transfers and $1M+ Profits

The U.S. Department of the Treasury's Office of Foreign Assets Control OFAC announced a fresh round of sanctions against two individuals and two entities for their role in the North Korean remote information technology IT worker scheme to generate illicit revenue for the regime's weapons of mass...

Linux Distros Unpatched Vulnerability : CVE-2023-26302

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as...

Linux Distros Unpatched Vulnerability : CVE-2022-21670

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser...

GLPI 安全漏洞

GLPI is an open source IT and asset management software from GLPI Open Source. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

SUSE CVE-2025-7969

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in markdown-it allows Cross-Site Scripting XSS. This vulnerability is associated with program files lib/renderer.mjs. This issue affects markdown-it: 14.1.0. NOTE: the Supplier does not conside...