MAL-2025-47832 Malicious code in react-content-parser (npm)

The package react-content-parser was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed262514ac58c1f13a4761aa92199769727342ebbd70431d112061e34da94a00 Any computer that has this package installed or running should be considered fully...

Malicious code in mongoose-ci (npm)

The package mongoose-ci was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d77c10d87ab8d987038afabe734d791e7d82eb5984a1e8789dbca6cc1e5063e Any computer that has this package installed or running should be considered fully...

The vulnerability of the Libarchive archive library, related to the execution of operations outside the buffer in memory, allows an attacker to gain access to confidential data and also trigger a service failure.

The vulnerability of the Libarchive archive library is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, as well as cause service failures...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the loghandler function. An unauthenticated user can access or modify files outside the intended directory by supplying crafted input to the file argument. Details A Directory Traversal attack also known as path...

Malicious code in @sev-ui-verse/hooks-and-helpers (npm)

The package @sev-ui-verse/hooks-and-helpers was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1049160f2e90aa1d0d8bffb031d38446873f5a0aac9805e51720e06075e0e582 Any computer that has this package installed or running should be...

Malicious code in postman-json (npm)

The package postman-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63e81e735aa1583841441847e7de0a269d581efabcfdcdac7cb7d6afd64df258 Any computer that has this package installed or running should be considered fully...

MAL-2025-47560 Malicious code in internallib_v714 (npm)

The package internallibv714 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949e0eb9d0a4f2ce9f9738485e24ab728066c412cd31cbc7445910a5e2709571 Any computer that has this package installed or running should be considered fully...

Malicious code in notmall (npm)

The package notmall was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4d32e62a0f50bec8aa915cd7b380add6d32de407308c006baf294bf0865b194 Any computer that has this package installed or running should be considered fully compromised...

CVE-2025-59532

Codex CLI is a coding agent from OpenAI that runs locally. In versions 0.2.0 to 0.38.0, due to a bug in the sandbox configuration logic, Codex CLI could treat a model-generated cwd as the sandbox’s writable root, including paths outside of the folder where the user started their session. This log...

MAL-2025-47518 Malicious code in bscrypt-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37b6a67f2ab3d64e12a4e1f6217f05bc3966886112b32fa46bfc0d26db96c06f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in isood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95552c81d5afcf7c02c3015baf503fa6c6fd1e22457eb2ac421aec6353dd50da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-59825

astral-tokio-tar is a tar archive reading/writing library for async Rust. In versions 0.5.3 and earlier of astral-tokio-tar, tar archives may extract outside of their intended destination directory when using the Entry::unpackinraw API. Additionally, the Entry::allowexternalsymlinks control which...

UBUNTU-CVE-2025-59825

astral-tokio-tar is a tar archive reading/writing library for async Rust. In versions 0.5.3 and earlier of astral-tokio-tar, tar archives may extract outside of their intended destination directory when using the Entry::unpackinraw API. Additionally, the Entry::allowexternalsymlinks control which...

CVE-2025-59825

CVE-2025-59825 affects astral-tokio-tar (Rust) up to v0.5.3: tar extraction can escape the target dir via Entry::unpack_in_raw and via a symlink pair that bypasses allow_external_symlinks, potentially enabling arbitrary file writes and code execution. The issue is fixed in v0.5.4; upgrading is re...

CVE-2025-59825

astral-tokio-tar is a tar archive reading/writing library for async Rust. In versions 0.5.3 and earlier of astral-tokio-tar, tar archives may extract outside of their intended destination directory when using the Entry::unpackinraw API. Additionally, the Entry::allowexternalsymlinks control which...

CVE-2025-59825 astral-tokio-tar has a path traversal in tar extraction

astral-tokio-tar is a tar archive reading/writing library for async Rust. In versions 0.5.3 and earlier of astral-tokio-tar, tar archives may extract outside of their intended destination directory when using the Entry::unpackinraw API. Additionally, the Entry::allowexternalsymlinks control which...

PT-2025-39215

Name of the Vulnerable Software and Affected Versions astral-tokio-tar versions 0.5.3 and earlier Description astral-tokio-tar is a tar archive reading/writing library for async Rust. Tar archives may extract files outside of their intended destination directory when using the Entry::unpack in ra...

MAL-2025-47485 Malicious code in http-err-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7a2e55871b065fdb7fedf48404b81400a55e30b5682d2f1f52f4518ef24058b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-59532 Codex has sandbox bypass due to bug in path configuration logic

Codex CLI is a coding agent from OpenAI that runs locally. In versions 0.2.0 to 0.38.0, due to a bug in the sandbox configuration logic, Codex CLI could treat a model-generated cwd as the sandbox’s writable root, including paths outside of the folder where the user started their session. This log...

Malicious code in tailwind-mouse-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c878282ff4bbb3aef14ffb5e31963987ccfe6f981778c39c7e696435ee7422e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...