MAL-2025-28998 Malicious code in pebble-5g9dq-9xbjc-unicorn-project (npm)

The package pebble-5g9dq-9xbjc-unicorn-project was found to contain malicious code...

MAL-2025-37756 Malicious code in unicorn-pebble-ayr018-project (npm)

The package unicorn-pebble-ayr018-project was found to contain malicious code...

MAL-2025-29049 Malicious code in peony-pebble-jbu062-project (npm)

The package peony-pebble-jbu062-project was found to contain malicious code...

MAL-2025-27749 Malicious code in nova-evtdo-km8su-pebble-project (npm)

The package nova-evtdo-km8su-pebble-project was found to contain malicious code...

MAL-2025-29003 Malicious code in pebble-dolphin-nou162-project (npm)

The package pebble-dolphin-nou162-project was found to contain malicious code...

MAL-2025-32247 Malicious code in ripple-7p2bv-s8wxk-pebble-project (npm)

The package ripple-7p2bv-s8wxk-pebble-project was found to contain malicious code...

MAL-2025-29007 Malicious code in pebble-orangutan-nwv723-project (npm)

The package pebble-orangutan-nwv723-project was found to contain malicious code...

MAL-2025-29009 Malicious code in pebble-tdtis-rmnhx-quartz-project (npm)

The package pebble-tdtis-rmnhx-quartz-project was found to contain malicious code...

MAL-2025-29006 Malicious code in pebble-lightning-ivx735-project (npm)

The package pebble-lightning-ivx735-project was found to contain malicious code...

MAL-2025-19944 Malicious code in everest-pebble-qke610-project (npm)

The package everest-pebble-qke610-project was found to contain malicious code...

MAL-2025-29005 Malicious code in pebble-honeycomb-mwu003-project (npm)

The package pebble-honeycomb-mwu003-project was found to contain malicious code...

MAL-2025-29000 Malicious code in pebble-amber-ufm115-project (npm)

The package pebble-amber-ufm115-project was found to contain malicious code...

MAL-2025-40645 Malicious code in yucca-pebble-lob084-project (npm)

The package yucca-pebble-lob084-project was found to contain malicious code...

MAL-2025-14958 Malicious code in asteroid-pebble-ctd957-project (npm)

The package asteroid-pebble-ctd957-project was found to contain malicious code...

MAL-2025-31707 Malicious code in raven-1nwxr-mb5o4-pebble-project (npm)

The package raven-1nwxr-mb5o4-pebble-project was found to contain malicious code...

MAL-2025-29004 Malicious code in pebble-emerald-cia767-project (npm)

The package pebble-emerald-cia767-project was found to contain malicious code...

MAL-2025-29002 Malicious code in pebble-coral-puz584-project (npm)

The package pebble-coral-puz584-project was found to contain malicious code...

MAL-2025-29008 Malicious code in pebble-quill-dda298-project (npm)

The package pebble-quill-dda298-project was found to contain malicious code...

Malicious code in @didi-pebble/pblint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb1531e6163d25b10b0a50538ba7b2462eea1da3199b5163aa90b8f5e4882e4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-3250

It was discovered that Canonical's Pebble service manager read-file API and the associated pebble pull command, before v1.10.2, allowed unprivileged local users to read files with root-equivalent permissions when Pebble was running as root. Fixes are also available as backports to v1.1.1, v1.4.2,...