MAL-2025-32569 Malicious code in runtime-bundle-armi (npm)

The package runtime-bundle-armi was found to contain malicious code...

MAL-2025-22227 Malicious code in harmony-common (npm)

The package harmony-common was found to contain malicious code...

MAL-2025-17265 Malicious code in Coflux (npm)

The package Coflux was found to contain malicious code...

MAL-2025-10965 Malicious code in @zalastax/nolb-com (npm)

The package @zalastax/nolb-com was found to contain malicious code...

MAL-2025-16744 Malicious code in cgeqtowidauyhsjp (npm)

The package cgeqtowidauyhsjp was found to contain malicious code...

MAL-2025-11062 Malicious code in @zalastax/nolb-cux (npm)

The package @zalastax/nolb-cux was found to contain malicious code...

Malicious code in @zalastax/nolb-nodebb-plugin- (npm)

The package @zalastax/nolb-nodebb-plugin- was found to contain malicious code...

MAL-2025-36946 Malicious code in timetick (npm)

The package timetick was found to contain malicious code...

MAL-2025-11260 Malicious code in @zalastax/nolb-eas_ (npm)

The package @zalastax/nolb-eas was found to contain malicious code...

MAL-2025-39611 Malicious code in xenith-k07oa-gwxa7-yarn-project (npm)

The package xenith-k07oa-gwxa7-yarn-project was found to contain malicious code...

MAL-2025-12052 Malicious code in @zalastax/nolb-ipj (npm)

The package @zalastax/nolb-ipj was found to contain malicious code...

CVE-2025-5455 affecting package qt5-qtbase for versions less than 5.12.11-18

CVE-2025-5455 affecting package qt5-qtbase for versions less than 5.12.11-18. A patched version of the package is available...

CVE-2025-38332 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38332 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38212 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38212 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38035 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38035 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

MAL-2025-6775 Malicious code in undeface-test-1 (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-54956

The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...

CVE-2025-54956

The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...

CVE-2025-54956

The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...

CVE-2025-54956

CVE-2025-54956 affects the R package gh (pre-1.5.0). The vulnerability arises when an HTTP response is constructed to include the request’s Authorization header, potentially exposing credentials. Several connected advisories confirm the issue and provide mitigations: Debian LTS DLA-4378-1 notes a...