MAL-2025-12482 Malicious code in @zalastax/nolb-ng- (npm)

The package @zalastax/nolb-ng- was found to contain malicious code...

CVE-2025-5455 affecting package qt5-qtbase for versions less than 5.12.11-18

CVE-2025-5455 affecting package qt5-qtbase for versions less than 5.12.11-18. A patched version of the package is available...

CVE-2025-38212 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38212 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38332 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38332 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38035 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38035 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

MAL-2025-6775 Malicious code in undeface-test-1 (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-54956

The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...

CVE-2025-54956

The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...

CVE-2025-54956

The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...

CVE-2025-54956

CVE-2025-54956 affects the R package gh (pre-1.5.0). The vulnerability arises when an HTTP response is constructed to include the request’s Authorization header, potentially exposing credentials. Several connected advisories confirm the issue and provide mitigations: Debian LTS DLA-4378-1 notes a...

MAL-2025-6670 Malicious code in z0rsdumbtestnonshould (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6653 Malicious code in schematics-cli (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6652 Malicious code in sajarilib (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6420 Malicious code in frontend-feature-flags (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6419 Malicious code in fooldependppu60h (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6415 Malicious code in essentialss (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6413 Malicious code in emailphotogallery (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6404 Malicious code in boost-chii-new (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6402 Malicious code in assetdash-og-new (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in runway-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ab69fc94c1b9d37312b22a4c970856a3b27f84b4f7e957ff2771a2244a527264 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...