Malicious code in soccketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fc9cac2969243ba864ef1645d5d99ed62e8e4906bc58cd32cee3fad42c9c528 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in socketi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f02e02642c533799ed96fac51f973f65097eb5b870dc1a0ea47e2fdcbb70893 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11381 Malicious code in soccketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fc9cac2969243ba864ef1645d5d99ed62e8e4906bc58cd32cee3fad42c9c528 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11382 Malicious code in socketi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f02e02642c533799ed96fac51f973f65097eb5b870dc1a0ea47e2fdcbb70893 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11345 Malicious code in passtpor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e427a84573f9d6512d302e4f8ffc7c1011e5b9d337f4b084da29c797ce25b9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in passsport1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68604126507bac849b697119200b6ef37f408aaa077f208ae0127605159a9832 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11344 Malicious code in passsport1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68604126507bac849b697119200b6ef37f408aaa077f208ae0127605159a9832 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in asdsafsadad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67f3884787706e55b04fcf9ab0749dd3f91bd1f8a9d06bd86180483dd9f581cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in passtpor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e427a84573f9d6512d302e4f8ffc7c1011e5b9d337f4b084da29c797ce25b9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vcse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23149b92d10aaf504452f58832dd63804e33639ceda81871c4188295d3d13117 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11408 Malicious code in vcse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23149b92d10aaf504452f58832dd63804e33639ceda81871c4188295d3d13117 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11241 Malicious code in asdsafsadad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67f3884787706e55b04fcf9ab0749dd3f91bd1f8a9d06bd86180483dd9f581cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@mseep/easy-notion-mcp (1.0.1), ioredis-xyz (5.11.2) potentially affected by unknown CVE via redis-type-xyz (1.10.6)

redis-type-xyz NPM version 1.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on redis-type-xyz and may be impacted: - @mseep/easy-notion-mcp 1.0.1 - ioredis-xyz 5.11.2 Source cves: unknown CVE Source advisory: SNYK:JS-REDISTYPEXYZ-18503282...

@dexwilt/mf-node (>=2.7.47, <=2.7.48) potentially affected by unknown CVE via @dexwilt/node-fetch (>=2.7.2, <=2.7.3)

@dexwilt/node-fetch NPM version =2.7.2, =2.7.47, =2.7.48 Source cves: unknown CVE Source advisory: SNYK:JS-DEXWILTNODEFETCH-18488459...

Linux Distros Unpatched Vulnerability : CVE-2026-55707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets fro...

Oracle PeopleSoft PeopleTools Multiple Vulnerabilities (CSPU Jun 2026)

The version of Oracle PeopleSoft PeopleTools installed on the remote host is 8.61.x prior to 8.61.20 or 8.62.x prior to 8.62.10. It is, therefore, affected by multiple vulnerabilities as noted in the June 2026 Critical Security Patch Update advisory, whose patches also resolve Oracle Security Ale...

OPENSUSE-SU-2026:11412-1 evince-48.4-2.1 on GA media

These are all security issues fixed in the evince-48.4-2.1 package on the GA media of openSUSE Tumbleweed...

Fedora 43 : lego (2026-256592dfe7)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-256592dfe7 advisory. Update to 5.3.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Slackware Linux 15.0 / current php82 Multiple Vulnerabilities (SSA:2026-211-01)

The version of php82 installed on the remote host is prior to 8.2.33 / 8.4.24. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-211-01 advisory. New php packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

MAL-2026-11298 Malicious code in ethers.json (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf52df7d6ae5e92551680d7529c4cdf686b19b742648e6ff80253deaa0c9919a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...