MAL-2025-48585 Malicious code in tailwind-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b6d6c0aead094725047d0ea623f7c50d3f1c9634f1381cdf31a484100178974 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v808 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdc267dc80d71e5150428ae279537b44916538d5b6e8d47b236ee01902ef1516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-40017 media: iris: Fix memory leak by freeing untracked persist buffer

In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix memory leak by freeing untracked persist buffer One internal buffer which is allocated only once per session was not being freed during session close because it was not being tracked as part of internal buffer li...

CVE-2025-40017

In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix memory leak by freeing untracked persist buffer One internal buffer which is allocated only once per session was not being freed during session close because it was not being tracked as part of internal buffer li...

CVE-2025-40017

In CVE-2025-40017, the Linux kernel fix addresses a memory leak in the iris subsystem where a single internal buffer allocated per session wasn't freed because it wasn’t tracked in the internal buffer list. The remediation adds explicit logic to free the untracked internal buffer upon session clo...

MAL-2025-48521 Malicious code in hari-zzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81362ae48dc13755d39b24433b10aae444d143cf59e5e9a66a68f303fb5bfe7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cryptocom-corp-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1239238ee10c3bbee24c5972edf8784d63ed06bba75e7ff07eaf23dde788c82f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in akasearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1075d10450cfce61ccff3b97a9b8bf18a7be1d286b307dbff6e0018768baa4da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48340 Malicious code in project-serum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c390d6d9b15f1fb2c2ad9b8e802cff831ed02b6028b111d2937705df46f3fdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48300 Malicious code in lovable-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bdd25899ff870aeb3b0ade0eb3b9d360a82f3a71dd4dd872e8f3dc4019ce982 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48272 Malicious code in andes-react-floater (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63aced74061cbadf118f22491f4edb9450b8ab612b289b34f3b0acefd7860d61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-10.1.1.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43b7ae35d8522c82d7af230bc72f76eafab00194667d0a543b69f62c609e769b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-1st7z7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 638828fbe37e3987211d30f184858e313c2d97580599b67ec562cd00ce90d942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-7yqujr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cea821935d7302a8685601e2ff71efe4aab95d5ab8c2111b47e8e070c4d19b1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48199 Malicious code in redirect-nron9d (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11387bec82159acbd6db861a54543df4dd58e91e8783e345fcdff23d9513ef00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-lbgja3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abd750469aeebddce144e4d4a8b6cda8f6fecf0bcbd9c7bbbd938a920135bfb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-gzixvc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 148d469aec04aa0c8339e4774fcb177101922beb6932fc192b74a658f76b7c2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-lp2xe6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4376bd258b7340f88cec0b334b433c7763d3d982e4bf626326ec9edb123835c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-k5j1u7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05b6183fa68095108bb6e2a546ec6010411256275821c65c7fa90abf00cb0d60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48347 Malicious code in simple-app-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12841bf7b69cb4d4bbfe8fe7d87b976164b92187dae534f07331b5025779b542 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...