Malicious code in nodemon-sudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b941e7418bdecb5f25e70716d050d989137d1cc995e31de120799bb96aae0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in client-cookies-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 84540e9e44077c6ea24d8b8dc6093397f9ff6bcac74e53fe1dabfdd37d1a9b95 The OpenSSF Package Analysis project identified 'client-cookies-agent' @ 99.9.5 npm as malicious. It is considered malicious because: - The...

Malicious code in n8n-nodes-mcputils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6597a77db59f15e865fcfb2e04784853a93a2a522632c9ffffdf9f83d234a80c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems allows a hacker to cause a service failure.

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

Malicious code in chain-api-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4948d6f7945e11f2d42e5ad5bb9fe577678ed57e1acb9ef244858ad572022543 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mchain-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0d5c2c37107e1a7d14258f9b9c256469d0fcf843bcb88419bf9a75dd38318bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testing-d3do (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cbb133c89692a67e9aff0a4777c486d480852fb223a5ac9b7c983ae94cdceef6 The OpenSSF Package Analysis project identified 'testing-d3do' @ 99.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in bizapi-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3243a0e75a614dce3a4ec14f3d531eb292ed0f9dcb48e09d55367952e6a127d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feedback-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b010aedb75591ab2ecad503373bbb8f0bb2bd98637c2e7c68aff89ec3ab26a1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in poc-node-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b010fdf55177f6b23e6c31ef24746e64ea73a1783480a2e207c9bfddcc9e46e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rabi-snooze-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 817c839ae17d82809b3dc9cb252237dc512d80339b11fc28c544a002e53128e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in breeze-feature-flag-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bc85f58d0fcdcfa75e143c0fb4e09095edf4d9fd3ac6d53576d58176beef49e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fusion-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b340a880ef3177b0632f113a7c619132bf28a0ef5df0eeb076f46b9db17f7b1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in qlkube (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67d812b4e6afa96229983750093435fa1dea4002fd3afe374d61cfd7a8090ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in security-console-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a180b49026fbe4dd5787621d741ec0d6ef2da9a212854a9d5e3cebbdfbb3c0a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Multiple vulnerabilities affect IBM Cloud Pak System

Summary Multiple vulnerabilities affect IBM Cloud Pak System. These vulnerabilties have been addressed with IBM Cloud Pak System 2.3.5.1. Vulnerability Details CVEID:CVE-2025-9230 DESCRIPTION: Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption c...

USN-8492-4: Linux kernel (Raspberry Pi) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; -...

Security Bulletin: IBM Operational Decision Manager for May 2026 - Multiple CVEs addressed

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Operational Decision Manager Vulnerability Details CVEID:CVE-2026-40973 DESCRIPTION: A local attacker on the same host as the application may be able to take contr...

389-ds:1.4 security update

An update is available for 389-ds-base, module.389-ds-base. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list 389 Directory Server is an LDAP version 3 LDAPv3...

Malicious code in clavue-agent-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d608ce92e60e5744b7d63b1c48ec29580bdcd0c92ea3ed259ccdb8a62dcf7d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...