Malicious code in postcss-theme-vars (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f769581a5253a548235fa611543497af016d8733ffe11c1f0967ed8e185791e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5166 Malicious code in postcss-preloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b38f8f559be2fa91638fba2e3b2099d14c3190366de54e3c9d740b14fec55fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in postcss-preloader

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in postcss-preloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b38f8f559be2fa91638fba2e3b2099d14c3190366de54e3c9d740b14fec55fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @balajih4kr/postcss

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @balajih4kr/postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29b83a8b5260357625ba9fad6ee0649e25c265bd0127fe1a27f9130777766e6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4014 Malicious code in postcss-optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1b21cb8bf9e07771bf78b04cf38a9b73e69aa559368217b2c01896e9fd46037 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in postcss-optimizer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in postcss-optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1b21cb8bf9e07771bf78b04cf38a9b73e69aa559368217b2c01896e9fd46037 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2023-44270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS i...

SUSE CVE-2023-44270

An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the...

Debian: Security Advisory (DLA-4003-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4003-1] node-postcss security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4003-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès December 26, 2024 https://wiki.debian.org/LTS -...

DLA-4003-1 node-postcss - security update

Bulletin has no description...

Debian dla-4003 : node-postcss - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4003 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4003-1 [email protected]...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.17.7 security and extras update

Red Hat OpenShift Container Platform release 4.17.7 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...

CVE-2023-44270

An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the...

Security Bulletin: IBM Security QRadar Analyst Workflow for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. The update addresses these issues. Vulnerability Details CVEID:CVE-2023-45857 DESCRIPTION: Axios is vulnerable to cross-site request forgery, caused by improper...

RHEL 8 : nodejs-postcss (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - nodejs-postcss: Regular expression denial of service during source map parsing CVE-2021-23368 Note that Nessus has...

Security Bulletin: IBM Security QRadar Analyst Workflow app for IBM QRadar SIEM includes components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that might be identified and exploited with automated tools. IBM has addressed the vulnerabilities. Vulnerability Details CVEID:CVE-2023-44270 DESCRIPTION: PostCSS could allow a remote attacker to bypass security...