MAL-2025-36105 Malicious code in test-mlw2-relay-icing-copal-quats (npm)

The package test-mlw2-relay-icing-copal-quats was found to contain malicious code...

MAL-2025-19861 Malicious code in eslint-plugin-relay-internal (npm)

The package eslint-plugin-relay-internal was found to contain malicious code...

MAL-2025-29492 Malicious code in poltergeist-ha-relay-pack (npm)

The package poltergeist-ha-relay-pack was found to contain malicious code...

MAL-2025-32051 Malicious code in relay-typeorm-norma-nova (npm)

The package relay-typeorm-norma-nova was found to contain malicious code...

MAL-2025-32631 Malicious code in sagitta-jovian-relay-hydra (npm)

The package sagitta-jovian-relay-hydra was found to contain malicious code...

MAL-2025-32048 Malicious code in relay-buffer-perseus-nanotechnology (npm)

The package relay-buffer-perseus-nanotechnology was found to contain malicious code...

MAL-2025-32050 Malicious code in relay-thuban-geckodriver-technosignature (npm)

The package relay-thuban-geckodriver-technosignature was found to contain malicious code...

MAL-2025-21093 Malicious code in fx-private-relay (npm)

The package fx-private-relay was found to contain malicious code...

MAL-2025-30732 Malicious code in promise-element-ui-relay-json (npm)

The package promise-element-ui-relay-json was found to contain malicious code...

MAL-2025-29365 Malicious code in planetology-relay-antd-halley (npm)

The package planetology-relay-antd-halley was found to contain malicious code...

MAL-2025-18175 Malicious code in deep-thought-relay-client (npm)

The package deep-thought-relay-client was found to contain malicious code...

MAL-2025-29142 Malicious code in phoebe-relay-jwt-pino (npm)

The package phoebe-relay-jwt-pino was found to contain malicious code...

MAL-2025-32049 Malicious code in relay-test (npm)

The package relay-test was found to contain malicious code...

New Android Malware Wave Hits Banking via NFC Relay Fraud, Call Hijacking, and Root Exploits

Cybersecurity researchers have disclosed a new Android trojan called PhantomCard that abuses near-field communication NFC to conduct relay attacks for facilitating fraudulent transactions in attacks targeting banking customers in Brazil. "PhantomCard relays NFC data from a victim's banking card t...

Routing and Wavelength Assignment with Minimal Attack Radius for QKD Networks

Quantum Key Distribution QKD can distribute keys with guaranteed security but remains susceptible to key exchange interruption due to physical-layer threats, such as high-power jamming attacks. To address this challenge, we first introduce a novel metric, namely Maximum Number of Affected Request...

Malicious code in productboard-eslint-plugin-relay (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 50a95e4b008863c195930bcd301dd1f243002839a301a5be5d0078cab7b22786 The OpenSSF Package Analysis project identified...

DEBIAN-CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets except when the relay is configured for strict source and learning disabled. Version 13.4.1...

UBUNTU-CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets except when the relay is configured for strict source and learning disabled. Version 13.4.1...

CVE-2025-43276

A logic error was addressed with improved error handling. This issue is fixed in macOS Sequoia 15.6. iCloud Private Relay may not activate when more than one user is logged in at the same time...

Apple macOS Sequoia has an unspecified vulnerability (CNVD-2025-18411)

Apple macOS Sequoia is an operating system from the American company Apple Apple. Apple macOS Sequoia contains a security vulnerability that can be exploited by attackers to cause iCloud Private Relay to fail to activate when multiple users are logged in at the same time...