Malicious code in @frostnode/waitfor (npm)

@frostnode/waitfor malicious versions 0.9.0, 0.10.3, 0.10.4, and 0.10.5, published by [email protected] is a trojanized npm package belonging to the wshu.net credential-stealer campaign. The campaign published trojanized look-alike utility packages across 12+ scopes whose publisher accoun...

MAL-2026-6305 Malicious code in @frostnode/waitfor (npm)

@frostnode/waitfor malicious versions 0.9.0, 0.10.3, 0.10.4, and 0.10.5, published by [email protected] is a trojanized npm package belonging to the wshu.net credential-stealer campaign. The campaign published trojanized look-alike utility packages across 12+ scopes whose publisher accoun...

CVE-2025-40336

Vulnerability summary: CVE-2025-40336 affects the Linux kernel DRM/GPU virtualization path (drm/gpusvm). The root cause is incorrect usage of hmm_pfn_to_map_order when a memory range partially covers a huge page (e.g., 2 MiB), which could lead to mapping memory outside the intended range. The pat...