MAL-2025-2747 Malicious code in chai-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e5e72069ba26720347311e7e7b22423d276dea2bb108ac5fb162bb4312e4ccd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Nine-Year-Old npm Packages Hijacked to Exfiltrate API Keys via Obfuscated Scripts

Cybersecurity researchers have discovered several cryptocurrency packages on the npm registry that have been hijacked to siphon sensitive information such as environment variables from compromised systems. "Some of these packages have lived on npmjs.com for over 9 years, and provide legitimate...

MAL-2025-2741 Malicious code in @takamol/qiwa-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a7c1ac0d47b523e1de684384da892f0683a8d543b56659127eb98ea88c1466a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-13554 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: This issue is an information disclosure problem that leaks sensitive details, such as API keys and system configurations, which could provide attackers with the necessary information to laun...

The vulnerability of the KEYS component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the KEYS component in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the findasymmetrickey function. Exploiting this vulnerability can allow an attacker to trigger a service failure...

lunary information disclosure vulnerability (CNVD-2025-08308)

lunary is lunary open source a production toolkit for LLM . An information disclosure vulnerability exists in lunary that stems from a GET /projects API endpoint exposing all project public and private API keys to users with least privileges, which can be exploited by an attacker to obtain...

CVE-2025-30353

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.12.0 and prior to version 11.5.0, when a Flow with the "Webhook" trigger and the "Data of Last Operation" response body encounters a ValidationError thrown by a failed condition operation, the A...

Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates

Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 12.0.10 LTS and 12.10.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported vulnerabilities...

MAL-2025-2731 Malicious code in ethers-provider2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64291b6905fba089a2dada5e0215c20954bf12f15f76d27c5c341d2b91baa81b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-30353 Directus's webhook trigger flows can leak sensitive data

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.12.0 and prior to version 11.5.0, when a Flow with the "Webhook" trigger and the "Data of Last Operation" response body encounters a ValidationError thrown by a failed condition operation, the A...

Sensitive Information Disclosure

LiteLLM is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper error handling due to an issue in proxyserver.py that leaks Langfuse API keys when an error occurs while parsing team settings, potentially exposing full access to stored requests...

kernel security update

5.14.0-503.34.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

container-tools:ol8 security update

aardvark-dns buildah cockpit-podman conmon containernetworking-plugins containers-common 1-82.0.1 - Updated removed references Orabug: 33473101 Alex Burmashev - Adjust registries.conf Nikita Gerasimov - remove references to RedHat registry Nikita Gerasimov 2:1-82 - update vendored components -...

MAL-2025-2661 Malicious code in consolidate-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cabd5f8487415db9bef4d60ff036c16f1390e7d129fa4fbd96045e096eb1e897 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2725 Malicious code in yxt-fe-center (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eefdd1eb0ce0a6fc7fac81b2bf725420903465a02f853bddcce53bb22c9463ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2680 Malicious code in internallib_v72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfd62ceee47f0cd86d2f4187fac0af99eb626f31eecad5929dcd0d7797ec95ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2675 Malicious code in gson-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd315ab6614bdf716d90b22ff2804ff7594f8bfe856133c0d60bebaf9d241e79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2707 Malicious code in sfapm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 853b53676c5023f880be7c158c82254598429dca281399a1d04fb433be3e7908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sensort/mongoose-migrations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d546ccd4e110a5e2cdd36b9823cddd0fc873607ff587abfa2761ce711a5896bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2638 Malicious code in @sensort/session (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96a646a0d38e8f89c8ecec7448085706baab46e90a7e46c14c3d819d971dab7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...