Security Bulletin: Vulnerabilities in Apache Kafka affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerabilities in Apache Kafka have been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerabilities have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-27818 DESCRIPTIO...

MAL-2025-17506 Malicious code in container-await-emulate-double-orchestrate (npm)

The package container-await-emulate-double-orchestrate was found to contain malicious code...

MAL-2025-19085 Malicious code in earth-wind-fork-orchestrate-notify (npm)

The package earth-wind-fork-orchestrate-notify was found to contain malicious code...

MAL-2025-22665 Malicious code in hot-decrypt-private-orchestrate-tau (npm)

The package hot-decrypt-private-orchestrate-tau was found to contain malicious code...

MAL-2025-23087 Malicious code in import-process-orchestrate-stub-phi (npm)

The package import-process-orchestrate-stub-phi was found to contain malicious code...

MAL-2025-24404 Malicious code in kernel-abstract-compile-proxy-orchestrate (npm)

The package kernel-abstract-compile-proxy-orchestrate was found to contain malicious code...

MAL-2025-26215 Malicious code in meta-bad-protected-orchestrate-serialize (npm)

The package meta-bad-protected-orchestrate-serialize was found to contain malicious code...

MAL-2025-28474 Malicious code in orchestrate-finally-static-long-cloud (npm)

The package orchestrate-finally-static-long-cloud was found to contain malicious code...

MAL-2025-29069 Malicious code in permission-rain-promise-orchestrate-psi (npm)

The package permission-rain-promise-orchestrate-psi was found to contain malicious code...

MAL-2025-29126 Malicious code in phi-orchestrate-cron-hash-function (npm)

The package phi-orchestrate-cron-hash-function was found to contain malicious code...

MAL-2025-32666 Malicious code in sandbox-report-cat-orchestrate-orchestrate (npm)

The package sandbox-report-cat-orchestrate-orchestrate was found to contain malicious code...

MAL-2025-33441 Malicious code in small-encrypt-orchestrate-star-grid (npm)

The package small-encrypt-orchestrate-star-grid was found to contain malicious code...

Malicious code in container-await-emulate-double-orchestrate (npm)

The package container-await-emulate-double-orchestrate was found to contain malicious code...

Malicious code in earth-wind-fork-orchestrate-notify (npm)

The package earth-wind-fork-orchestrate-notify was found to contain malicious code...

Malicious code in hot-decrypt-private-orchestrate-tau (npm)

The package hot-decrypt-private-orchestrate-tau was found to contain malicious code...

Malicious code in import-process-orchestrate-stub-phi (npm)

The package import-process-orchestrate-stub-phi was found to contain malicious code...

Malicious code in kernel-abstract-compile-proxy-orchestrate (npm)

The package kernel-abstract-compile-proxy-orchestrate was found to contain malicious code...

Malicious code in meta-bad-protected-orchestrate-serialize (npm)

The package meta-bad-protected-orchestrate-serialize was found to contain malicious code...

Malicious code in orchestrate-finally-static-long-cloud (npm)

The package orchestrate-finally-static-long-cloud was found to contain malicious code...

Malicious code in permission-rain-promise-orchestrate-psi (npm)

The package permission-rain-promise-orchestrate-psi was found to contain malicious code...