Malicious code in @zalastax/nolb-_react-md (npm)

The package @zalastax/nolb-react-md was found to contain malicious code...

MAL-2025-17617 Malicious code in cosmicsilence-hydrogeology-reveal-md-flare (npm)

The package cosmicsilence-hydrogeology-reveal-md-flare was found to contain malicious code...

MAL-2025-32177 Malicious code in reveal-md-process-boson-boson (npm)

The package reveal-md-process-boson-boson was found to contain malicious code...

MAL-2025-15976 Malicious code in bootes-primatology-commitlint-reveal-md (npm)

The package bootes-primatology-commitlint-reveal-md was found to contain malicious code...

MAL-2025-28210 Malicious code in omega-cms-lf-ng-md-file-input (npm)

The package omega-cms-lf-ng-md-file-input was found to contain malicious code...

Malicious code in bootes-primatology-commitlint-reveal-md (npm)

The package bootes-primatology-commitlint-reveal-md was found to contain malicious code...

Malicious code in omega-cms-lf-ng-md-file-input (npm)

The package omega-cms-lf-ng-md-file-input was found to contain malicious code...

Malicious code in neptune-hermes-taurus-reveal-md (npm)

The package neptune-hermes-taurus-reveal-md was found to contain malicious code...

luis-reddit-cli (=1.0.0), md-links-larissadepaula (>=0.2.0 <=0.2.1) +1 more potentially affected by unknown CVE via node-fecth (=0.0.1-security)

node-fecth NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node-fecth and may be impacted: - luis-reddit-cli =1.0.0 - md-links-larissadepaula =0.2.0, =0.0.37, =0.0.40 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27...

Malicious code in cosmicsilence-hydrogeology-reveal-md-flare (npm)

The package cosmicsilence-hydrogeology-reveal-md-flare was found to contain malicious code...

Malicious code in gravitationalwave-wormhole-publish-reveal-md (npm)

The package gravitationalwave-wormhole-publish-reveal-md was found to contain malicious code...

Malicious code in reveal-md-process-boson-boson (npm)

The package reveal-md-process-boson-boson was found to contain malicious code...

Malicious code in auriga-ultra-uninstall-reveal-md (npm)

The package auriga-ultra-uninstall-reveal-md was found to contain malicious code...

Malicious code in hyperion-reveal-md-wasat-ganymede (npm)

The package hyperion-reveal-md-wasat-ganymede was found to contain malicious code...

MAL-2025-32178 Malicious code in reveal-md-virtualreality-nodejs-equinox (npm)

The package reveal-md-virtualreality-nodejs-equinox was found to contain malicious code...

MAL-2025-32176 Malicious code in reveal-md-genomics-blackhole-meissa (npm)

The package reveal-md-genomics-blackhole-meissa was found to contain malicious code...

MAL-2025-10364 Malicious code in @zalastax/nolb-_react-md (npm)

The package @zalastax/nolb-react-md was found to contain malicious code...

MAL-2025-27284 Malicious code in neptune-hermes-taurus-reveal-md (npm)

The package neptune-hermes-taurus-reveal-md was found to contain malicious code...

kernel: drivers:md:fix a potential use-after-free bug

A use-after-free bug exists in the linux kernel such that in the line "raid5releasestripesh;" drops the reference to sh and may cause sh to be released. However, sh is subsequently used in lines "if sh-batchhead && sh != sh-batchhead" resulting in a minor application crash...

CVE-2025-38500

In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collectmd xfrm interface collectmd property on xfrm interfaces can only be set on device creation, thus xfrmichangelink should fail when called on such interfaces. The check to...