Malicious code in 1231dai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d09761b1be982e0d4d6c72363d32a065c01f1799ef2a7df482d0d29b27e5e38 The package 1231dai was found to contain malicious code. Source: ghsa-malware 059687ab0f69f9d832e38192dcf9e4f9f48bdf8469db1d0f049eb65cb9fbc20b Any...

MAL-2026-328 Malicious code in 1231dai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d09761b1be982e0d4d6c72363d32a065c01f1799ef2a7df482d0d29b27e5e38 The package 1231dai was found to contain malicious code. Source: ghsa-malware 059687ab0f69f9d832e38192dcf9e4f9f48bdf8469db1d0f049eb65cb9fbc20b Any...

Malicious code in viem-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73dca89de6152d63a64cab3a25d8444853cfdd2502260ea1d2b33f055d4adaec The package viem-js was found to contain malicious code. Source: ghsa-malware 7b2687f596cd8f76eec0d498e10a1f632b4ae06acd052210c214ee332feddb9d Any...

MAL-2026-331 Malicious code in cyrpto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88df3de403df4549d6cae9b1d508f683da4ed91d472a6020a40a3dbd6d5930fc The package cyrpto was found to contain malicious code. Source: ghsa-malware 1e003c50bdddfa1368c5ed0e356acfab8b21a0d410f1d181471b88221a590cd9 Any...

Malicious code in cyrpto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88df3de403df4549d6cae9b1d508f683da4ed91d472a6020a40a3dbd6d5930fc The package cyrpto was found to contain malicious code. Source: ghsa-malware 1e003c50bdddfa1368c5ed0e356acfab8b21a0d410f1d181471b88221a590cd9 Any...

MAL-2026-334 Malicious code in viem-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73dca89de6152d63a64cab3a25d8444853cfdd2502260ea1d2b33f055d4adaec The package viem-js was found to contain malicious code. Source: ghsa-malware 7b2687f596cd8f76eec0d498e10a1f632b4ae06acd052210c214ee332feddb9d Any...

Malicious code in tailwin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6f42d8ac771f7de2a89b36d91afb6db0c0445c7c3b9c4c094cf74b1448343d The package tailwin was found to contain malicious code. Source: ghsa-malware 25f1e8ebfcada6d9b8288179365d666ecc4679a549f815f6715e35fc614e03e2 Any...

MAL-2026-332 Malicious code in tailwin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6f42d8ac771f7de2a89b36d91afb6db0c0445c7c3b9c4c094cf74b1448343d The package tailwin was found to contain malicious code. Source: ghsa-malware 25f1e8ebfcada6d9b8288179365d666ecc4679a549f815f6715e35fc614e03e2 Any...

kernel security update

4.18.0-553.94.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

MiracleLinux 3 : kernel-2.6.18-348.8.AXS3 (AXBA:2013-722:07)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXBA:2013-722:07 advisory. - Multiple race conditions in the madviseremove function in mm/madvise.c in the Linux kernel before 3.4.5 allow local users to cause a denial of...

Malicious Package

Overview chakra-ui-2--styled-system is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2026-321 Malicious code in flip-prx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51518ff5a54220f9558ab04c5bad0ac14e14ee3aff6c92b54c1b727e1a90f4b7 The package flip-prx was found to contain malicious code. Source: ghsa-malware 7490a8c35552395560296cfd74b57dc93c222f1bc067d02a1c92d1ec180b7bfa Any...

OESA-2026-1073 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix crash in transport port remove by using iocinfo During mpt3sastransportportremove, messages were logged with devprintk against...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000765)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000765 advisory. Multiple race conditions in the madviseremove function in mm/madvise.c in the Linux kernel before 3.4.5 allow local users to cause a denial of service use-after-free...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001400)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001400 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is an out-of-bounds access in removedirtysegment in fs/f2fs/segment.c when mounting an f2fs image...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004091)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004091 advisory. A double-free can happen in idrremoveall in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege escalation or...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001246 advisory. A double-free can happen in idrremoveall in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege escalation or...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004220)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004220 advisory. In the Linux kernel 4.19.83, there is a use-after-free read in the debugfsremove function in fs/debugfs/inode.c which is used to remove a file or directory in debugf...

SUSE-SU-2026:20244-1 Security update for elemental-toolkit, elemental-operator

This update for elemental-toolkit, elemental-operator fixes the following issues: elemental-operator: - Update to version 1.6.10: Remove 'latest' tag as this overlaps with the latest branch Bump github.com/rancher-sandbox/go-tpm and its dependencies This bump includes fixes to some CVEs: bsc12418...

SUSE CVE-2025-68804

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosecishtp: Fix UAF after unbinding driver After unbinding the driver, another kthread crosecconsolelogwork is still accessing the device, resulting an UAF and crash. The driver doesn't unregister the EC device ...