Malicious code in @zalastax/nolb-mich (npm)

The package @zalastax/nolb-mich was found to contain malicious code...

Malicious code in snow_tffx8_orlki_coral (npm)

The package snowtffx8orlkicoral was found to contain malicious code...

Malicious code in authorize-interpret-notify-benchmark-protected (npm)

The package authorize-interpret-notify-benchmark-protected was found to contain malicious code...

Malicious code in dsfserewkbaaat (npm)

The package dsfserewkbaaat was found to contain malicious code...

Malicious code in @zalastax/nolb-parv (npm)

The package @zalastax/nolb-parv was found to contain malicious code...

Malicious code in pensievr (npm)

The package pensievr was found to contain malicious code...

Malicious code in dream_pu36t_xpc65_crystal (npm)

The package dreampu36txpc65crystal was found to contain malicious code...

Malicious code in quince-7mv-project (npm)

The package quince-7mv-project was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-37889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Consistently treat platformmax as control value This reverts commit 9bdd10d57a88...

Linux Distros Unpatched Vulnerability : CVE-2025-38080

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Increase blocksequence array size Why It's possible to generate more than 50 steps in hwssbuildfastsequence, for example with a 6-pipe asic whe...

Linux Distros Unpatched Vulnerability : CVE-2025-22090

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/mm/pat: Fix VMPAT handling when fork fails in copypagerange If trackpfncopy fails, we already added the dst VMA to the maple tree. As fork fails, we'll...

Malicious code in ngf-attachments-list (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

PT-2025-27492 · Unknown · Tiny-Secp256K1

Name of the Vulnerable Software and Affected Versions: tiny-secp256k1 versions prior to 1.1.7 Description: A private key can be extracted when signing a malicious JSON-stringifiable object, affecting environments where the global Buffer is the buffer package. The Buffer.isBuffer check can be...

Malicious code in nstmrt-stf-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0da052c315a64ad23ddcebd853a91fc2f81597d0cd587326b5f7554911cc9d73 The OpenSSF Package Analysis project identified 'nstmrt-stf-api' @ 1.0.10 npm as malicious. It is considered malicious because: - The package...

Malicious code in sitewidesearch-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db1cd58fbfc07f7e9343fda6eb8ac3f48dffd00d4766ec9680eb72e698baf209 Any computer that has this package installed or running should be considered...

Malicious code in jd-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f205097feb67db492d1ce42f141278ef445cb7792b8c530f866eb0a837e6d47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2021-42739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and...

Linux Distros Unpatched Vulnerability : CVE-2023-29403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as...

Linux Distros Unpatched Vulnerability : CVE-2018-2637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JMX. Supported versions that are affected are Java SE: 6u171,...

Linux Distros Unpatched Vulnerability : CVE-2020-35517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create...