MAL-2025-33027 Malicious code in setup-jsonnet (npm)

The package setup-jsonnet was found to contain malicious code...

MAL-2025-20738 Malicious code in folksr (npm)

The package folksr was found to contain malicious code...

MAL-2025-10135 Malicious code in @zalastax/nolb-_iod (npm)

The package @zalastax/nolb-iod was found to contain malicious code...

MAL-2025-13986 Malicious code in accretion-luna-materialize-process (npm)

The package accretion-luna-materialize-process was found to contain malicious code...

MAL-2025-12078 Malicious code in @zalastax/nolb-jsod (npm)

The package @zalastax/nolb-jsod was found to contain malicious code...

Malicious code in my-little-package-library (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5439 Malicious code in my-little-package-library (npm)

The package communicates with a domain associated with malicious activity...

The vulnerability of the Windows Package Library Manager component of the Microsoft Windows operating system allows a perpetrator to disclose protected information.

The vulnerability of the Windows Package Library Manager component of the Microsoft Windows operating system is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to disclose protected information...

CVE-2024-38203

Windows Package Library Manager Information Disclosure Vulnerability...

CVE-2024-38203 Windows Package Library Manager Information Disclosure Vulnerability

...

CVE-2024-38203

Technical details for CVE-2024-38203 are not publicly available in the supplied documents. No specifics on affected products, root cause, or remediation are provided here; monitor the feeds for updates from Microsoft and vulnerability trackers.

Windows Package Library Manager Information Disclosure Vulnerability

...

KLA77106 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code...

PT-2024-8087 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a component of the Microsoft Windows operating system, specifically the Windows Package Library Manager, which has a flaw in its data protection mechanism...

CVE-2023-32823

In rpmb , there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07912966; Issue ID: ALPS07912966...

CVE-2023-27079

Command Injection vulnerability found in Tenda G103 v.1.0.05 allows an attacker to obtain sensitive information via a crafted package...

@teachbase/utils (1.0.1) potentially affected by CVE-2022-36083 via jose-browser-runtime (3.16.1)

jose-browser-runtime NPM version 3.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on jose-browser-runtime and may be impacted: - @teachbase/utils 1.0.1 Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...