387 matches found
CVE-2025-33242
NVIDIA B300 MCU contains a vulnerability in the CX8 MCU that could allow a malicious actor to modify unsupported registries, causing a bad state. A successful exploit of this vulnerability might lead to denial of service and data tampering...
CVE-2025-33242
NVIDIA B300 MCU contains a vulnerability in the CX8 MCU that could allow a malicious actor to modify unsupported registries, causing a bad state. A successful exploit of this vulnerability might lead to denial of service and data tampering...
CVE-2025-33242
The NVIDIA security bulletin adds CVE-2025-33242 to HGX and DGX B300 products (CX8 MCU). It describes a vulnerability that could allow a malicious actor to modify unsupported registries, potentially causing a bad state with Denial of Service and data tampering (vector: AV:N/AC:H/PR:H/UI:N/S:U/C:N...
CVE-2025-33242
NVIDIA B300 MCU contains a vulnerability in the CX8 MCU that could allow a malicious actor to modify unsupported registries, causing a bad state. A successful exploit of this vulnerability might lead to denial of service and data tampering...
PT-2026-27503
NVIDIA B300 MCU contains a vulnerability in the CX8 MCU that could allow a malicious actor to modify unsupported registries, causing a bad state. A successful exploit of this vulnerability might lead to denial of service and data tampering...
Malicious Package
Overview sequelization is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview mapkit-example-vue is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
How Public Container Registries Have Become a Silent Risk Multiplier in a Modern Supply Chain
Key Takeaways Pulling container images from public registries is a trust decision, not a neutral operational step. The impact extends to infrastructure stability, cloud spend, and security risk. Cryptomining is the most common form of malicious abuse in public container images, driven by the ease...
CVE-2025-68944
A flaw was found in Gitea, a self-hosted Git service. This vulnerability allows an authenticated user to bypass access controls within its package registries. This occurs because the system improperly handles the propagation of token scope, which defines what actions a token is allowed to perform...
CVE-2025-68944
Gitea before 1.22.2 sometimes mishandles the propagation of token scope for access control within one of its own package registries...
PT-2025-53442
Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.22.2 Description A flaw exists in Gitea where the propagation of token scope for access control is improperly handled within its package registries. This can lead to unauthorized access. Recommendations Update to Gite...
Malicious Package
Overview phx-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
[SECURITY] Fedora 42 Update: skopeo-1.20.0-4.fc42
Command line utility to inspect images and repositories directly on Docker registries without the need to pull them...
MAL-2025-179319 Malicious code in unimna-safi-aafcua (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92aa87e47e25ced64ecba8d12e61a150800ca125e4b4edea464643ab6df30ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-177244 Malicious code in poglymer-ogaih-gac (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4133c9df6e14d6c9dab9979f03b9fa0f8408b9813572cb44ccff84a2698602d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in suharta-poke60 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a07276543d0d09e4156be6b7a6be416e0c5f88f889b957010010d97b6444eafc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-170399 Malicious code in verify-ayica-amuina (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d7eadc8ec337d4735ccb7f0ffe244adc3efe10c571175f9b47214e2fe39ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146122 Malicious code in perseus-typeorm-mongodb-hydra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc83ca1e203d8fbb6e77a66127b5b0d18ebe78c6a50e0dcb8417c8e665ae8a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-127955 Malicious code in kresna-lapis7-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ee0806cf9d82548a532d8f57f867d8c39d61650a86fb3a3a283e623924b506a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-121582 Malicious code in live_gerbil_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7962d038e5d32a7bf3ee72bb4812730b9a66fd163c1c20b6537a0af3a72f745f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...