CVE-2025-63593

creationtimestamp| type| source ---|---|--- 2025-11-03 21:54:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4qz3cjz3m2k...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: wifi: mt76: fix linked list corruption Never leave scheduled wcid entries on the temporary on-stack list...

China-Linked Hackers Exploit Windows Shortcut Flaw to Target European Diplomats

A China-affiliated threat actor known as UNC6384 has been linked to a fresh set of attacks exploiting an unpatched Windows shortcut vulnerability to target European diplomatic and government entities between September and October 2025. The activity targeted diplomatic organizations in Hungary,...

CISA Flags VMware Zero-Day Exploited by China-Linked Hackers in Active Attacks

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a high-severity security flaw impacting Broadcom VMware Tools and VMware Aria Operations to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation in the wild. The vulnerability in...

CVE-2025-12223

creationtimestamp| type| source ---|---|--- 2025-10-27 07:19:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m45uw7eaao2o...

Malicious code in vulnerability-test (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in ajna-rewards-snapshot (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5ea81a48c03116271d6cc0fb54220dcc73b51b0ad8f01543f45365ec51c1de3 Any computer that has this package installed or running should be considered...

Malicious code in @aml-ark/demo-house (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e366f776aeaca182573ad2bf8f73e1d66803e0a13d1f4dc7f074f078b3cef347 Any computer that has this package installed or running should be considered...

MAL-2025-48688 Malicious code in helm-charts-monorepo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 927894d07d39eb62e7540bb7cb82999c513d6e9478109895a33f8d8027bae41d Any computer that has this package installed or running should be considered...

CVE-2025-10701

creationtimestamp| type| source ---|---|--- 2025-10-24 09:24:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3wkisipz22m...

CVE-2025-62236

The Frontier Airlines website has a publicly available endpoint that validates if an email addresses is associated with an account. An unauthenticated, remote attacker could determine valid email addresses, possibly aiding in further attacks...

MAL-2025-48693 Malicious code in internal-links-autocomplete-id (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in hyatt-album (npm)

Malicious package does system info exfiltration, arbitrary code execution via install scripts, and a suspicious version number. The package communicates with a domain associated with malicious activity...

Malicious code in hyatt-residential-roster (npm)

Package is malware. Collects and exfiltrates sensitive data to an external server. Suspicious install scripts execute the same script multiple times. The package communicates with a domain associated with malicious activity...

MAL-2025-48765 Malicious code in tps-lookup (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73fc3e3810086149d54c3870a4fc1976c9868f6995217b2b6e1db7bb7d20cf0e Any computer that has this package installed or running should be considered...

Malicious code in datadog-eventhub-forwarder (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in shutterstock-cli (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293a07df288218d171e1132e93d24e0f6e75160174cf78ef8589073b1e7eb72a Any computer that has this package installed or running should be considered...

Malicious code in infobip-calls-showcase (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7a032e7c75c74d99948394ea2e689b4b0c7d679a0bec3adcf6f869a27cda5c0 Any computer that has this package installed or running should be considered...

orx-concurrent-bag (>=1.0.0 <=1.16.0), orx-concurrent-iter (>=1.0.0 <=1.22.1) +9 more potentially affected by unknown CVE via orx-pinned-vec (>=0.1.1 <=2.12.0)

orx-pinned-vec CARGO version =0.1.1, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =0.6.0, =2.14.0 Source cves: unknown CVE Source advisory: OSV:GHSA-H5J3-CRG5-8JQM...

Salt Typhoon APT Targets Global Telecom and Energy Sectors, Says Darktrace

The China-linked Salt Typhoon APT group attacked a European telecom via a Citrix NetScaler vulnerability in July 2025, Darktrace reports. This follows past US Army and telecom breaches...