Malicious code in list-issue-predecessor-dependencies-block (npm)

Source: ossf-package-analysis 0f74d699bfc5fcf83c6f2864f93ecd41d3d9f8613f45f6bfb3b6dd5eeb7a880e The OpenSSF Package Analysis project identified 'list-issue-predecessor-dependencies-block' @ 99.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain...

Malicious Package

Overview list-issue-predecessor-dependencies-block is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious code in list-issue-predecessor-dependencies-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbd4d4e3aa51ec1a7ebc0a0d4f728698503432546f139f67998849f8fff9b614 npm package [email protected] auto-executes index.js from three lifecycle hooks preinstall, install, postinstall on np...

CVE-2025-14294

The Razorpay for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getCouponList function in all versions up to, and including, 4.7.8. This is due to the checkAuthCredentials permission callback always returning true,...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a page error that could cause deleted BOs to remain in the list...

RHEL 9 : kernel (RHSA-2025:22405)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22405 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nfsd: handle getclientlocked...

UBUNTU-CVE-2022-4981

A vulnerability was detected in DCMTK up to 3.6.7. The impacted element is the function DcmQueryRetrieveConfig::readPeerList of the file /dcmqrcnf.cc of the component dcmqrscp. The manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit is now publ...

EUVD-1999-0756

Malware in sbrugna...

EUVD-2012-6410

Malware in sbrugna...

EUVD-2002-0001

Malware in sbrugna...

EUVD-2017-7301

Malware in sbrugna...

EUVD-2022-46680

Malicious code in bioql PyPI...

EUVD-2022-46681

Malicious code in bioql PyPI...

EUVD-2024-37590

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-41149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: block: avoid to reuse hctx not removed from cpuhp callback list If the 'hctx' isn't removed...

CVE-2024-57765

MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the sname parameter at table/list...

CVE-2022-49872

In the Linux kernel, the following vulnerability has been resolved: net: gso: fix panic on fraglist with mixed head alloc types Since commit 3dcbdb134f32 "net: gso: Fix skbsegment splat when splitting gsosize mangled skb having linear-headed fraglist", it is allowed to change gsosize of a GRO...

CVE-2025-32242

CVE-2025-32242 affects the WordPress plugin Hive Support. It describes a Missing Authorization vulnerability where access to functionality is not properly constrained by ACLs, impacting Hive Support versions up to 1.2.2. The public documents do not specify the exact vulnerable components, exploit...

CVE-2023-52926

CVE-2023-52926 is a Linux kernel vulnerability where IORING_OP_READ does not fully consume the provided buffer list when read returns a negative value (except -EAGAIN/-EIOCBQUEUED). This can cause a use-after-free when the completion io_rw_done runs in a different context. The issue is documented...

openssl: SSL_select_next_proto buffer overread

A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSLselectnextproto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called...