MAL-2025-11013 Malicious code in @zalastax/nolb-cordova-x (npm)

The package @zalastax/nolb-cordova-x was found to contain malicious code...

MAL-2025-18860 Malicious code in dsfserewkbaaaa3 (npm)

The package dsfserewkbaaaa3 was found to contain malicious code...

MAL-2025-21753 Malicious code in gorge-topaz-ptp670-project (npm)

The package gorge-topaz-ptp670-project was found to contain malicious code...

MAL-2025-10140 Malicious code in @zalastax/nolb-_jai (npm)

The package @zalastax/nolb-jai was found to contain malicious code...

Malicious code in @zalastax/nolb-esy (npm)

The package @zalastax/nolb-esy was found to contain malicious code...

MAL-2025-36424 Malicious code in test-mlw2-telos-stulm-table-paras (npm)

The package test-mlw2-telos-stulm-table-paras was found to contain malicious code...

MAL-2025-10580 Malicious code in @zalastax/nolb-_wea (npm)

The package @zalastax/nolb-wea was found to contain malicious code...

MAL-2025-10000 Malicious code in @zalastax/nolb-_extri (npm)

The package @zalastax/nolb-extri was found to contain malicious code...

MAL-2025-22227 Malicious code in harmony-common (npm)

The package harmony-common was found to contain malicious code...

MAL-2025-32569 Malicious code in runtime-bundle-armi (npm)

The package runtime-bundle-armi was found to contain malicious code...

MAL-2025-12672 Malicious code in @zalastax/nolb-node-red-contrib-f (npm)

The package @zalastax/nolb-node-red-contrib-f was found to contain malicious code...

CVE-2025-5455 affecting package qt5-qtbase for versions less than 5.12.11-18

CVE-2025-5455 affecting package qt5-qtbase for versions less than 5.12.11-18. A patched version of the package is available...

CVE-2025-38035 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38035 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38212 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38212 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38332 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38332 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

MAL-2025-6775 Malicious code in undeface-test-1 (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-54956

The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...

CVE-2025-54956

The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...

CVE-2025-54956

The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...

CVE-2025-54956

CVE-2025-54956 affects the R package gh (pre-1.5.0). The vulnerability arises when an HTTP response is constructed to include the request’s Authorization header, potentially exposing credentials. Several connected advisories confirm the issue and provide mitigations: Debian LTS DLA-4378-1 notes a...