Malicious code in wrap-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03a9ed7b659046381b6934ad92828286dcdec2b36fd7cad2a09b4335f51b490c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in wrap-plugins

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in setting-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6665b6be13bb69a3fce7cb511bad92a2061f85eaf56bfef87b4ef5a30703637 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4501 Malicious code in setting-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6665b6be13bb69a3fce7cb511bad92a2061f85eaf56bfef87b4ef5a30703637 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in setting-plugins

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in yellow-plugins

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in yellow-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb3e37b16c5268bc8b2b83a008adf1c748010571f75403448d6a1a993c7baef3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4524 Malicious code in yellow-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb3e37b16c5268bc8b2b83a008adf1c748010571f75403448d6a1a993c7baef3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in recover-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9d2b9a72f460c7e7dd5dcf39ea9dc126972b71a2d18aad716e2b89e115ee690 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in recover-plugins

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4499 Malicious code in recover-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9d2b9a72f460c7e7dd5dcf39ea9dc126972b71a2d18aad716e2b89e115ee690 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4510 Malicious code in style-beautify-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8c7477260a4838812ce1ffefa15867a9cc2252be7e06ec8f060d4fb919d757d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in style-beautify-plugins

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in style-beautify-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8c7477260a4838812ce1ffefa15867a9cc2252be7e06ec8f060d4fb919d757d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ALSA-2025:8201 Important: gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fixes: GStreamer: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution...

RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2025:8183)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:8183 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a...

gstreamer1-plugins-bad-free security update

1.16.1-5.0.1 - Update origin URL Orabug: 36209826 1.16.1-5 - fix for CVE-2025-3887 Resolves: RHEL-93051...

gstreamer1-plugins-bad-free security update

1.22.12-4 - fix for CVE-2025-3887 Resolves: RHEL-93063...

AlmaLinux 9 : gstreamer1-plugins-bad-free (ALSA-2025:8183)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:8183 advisory. GStreamer: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-3887 Tenable has extracted the preceding descripti...

Oracle Linux 9 : gstreamer1-plugins-bad-free (ELSA-2025-8183)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8183 advisory. 1.22.12-4 - fix for CVE-2025-3887 Resolves: RHEL-93063 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...