MAL-2025-192406 Malicious code in datadog-checks-dependency-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965b1dfdded3e786f1691c392462534c6a7dc105aa989d08e68ff1b6c9f78bc7 The package datadog-checks-dependency-provider was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192405 Malicious code in confluent-kafka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f8f3691acc10147a767bd08facab31e59a8acfb8d38c89df1400e263cc6f8f The package confluent-kafka was found to contain malicious code. Source: ghsa-malware 135e8cf2cd5582b8ed8562c5f5ccfd1cf7265319ad340463b750b75e341858e...

MAL-2025-192417 Malicious code in rum-events-format (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6a17ba09614cd69d096859385577957b2737a3dce290dda9712c51fd7179c5 The package rum-events-format was found to contain malicious code. Source: ghsa-malware...

Malicious code in wasm-bindgen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3b2a3d6aa85e6e53ccd0463891b26156f77f3b75134166dbc68c14ec2c6bd2 The package wasm-bindgen was found to contain malicious code. Source: ghsa-malware a1de8824d178cfc9806b7413eeb3661781e7e278f0b877117bddb857bddb592b A...

Malicious code in datadog-checks-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26bc16bdf501ec221458349c8a28879a12b353a46c1126cc93d9f0ce3af9d793 The package datadog-checks-downloader was found to contain malicious code. Source: ghsa-malware...

Malicious code in fastavro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e01c7f0d2603f1d6cf541b7aa69c4bf9253ad1cd6b970a3337db957668a420 The package fastavro was found to contain malicious code. Source: ghsa-malware dfa83913e0a60ce0006e336f2f9f837aac0fa16d414d3c4c149562e19aed7474 Any...

MAL-2025-192418 Malicious code in sfdc-abstract-legend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29f7f51ba229ced87dfa4e1c978407d9e716ba77115ad38601c49896e0584bb The package sfdc-abstract-legend was found to contain malicious code. Source: ghsa-malware...

Malicious code in portal-lim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff3dc977380263ed801e45db7d242fb194b66d319545d913fd30087e7c4b274 The package portal-lim was found to contain malicious code. Source: ghsa-malware 9368b862e0bcedf32684551fa238a7364f7214a84bae4597cff992d6ca8b2993 Any...

MAL-2025-192415 Malicious code in portal-lim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff3dc977380263ed801e45db7d242fb194b66d319545d913fd30087e7c4b274 The package portal-lim was found to contain malicious code. Source: ghsa-malware 9368b862e0bcedf32684551fa238a7364f7214a84bae4597cff992d6ca8b2993 Any...

Malicious code in database-mongoose-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df08b31cea7b04dc684cec25582ae2e1877edf126ed8b1963f77c87b4d93de08 The package database-mongoose-kit was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192398 Malicious code in database-mongoose-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df08b31cea7b04dc684cec25582ae2e1877edf126ed8b1963f77c87b4d93de08 The package database-mongoose-kit was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192397 Malicious code in @onlytoodles/crypto-jsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731c33f548ff79b458afc89fa8f3158762537acf2db8d026864792bb3222be7c The package @onlytoodles/crypto-jsa was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview @onlytoodles/crypto-jsa is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in @onlytoodles/crypto-jsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731c33f548ff79b458afc89fa8f3158762537acf2db8d026864792bb3222be7c The package @onlytoodles/crypto-jsa was found to contain malicious code. Source: ghsa-malware...

Malicious code in wartsila-text-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa25dcd1a96ff24f8f3638d5f052e05a258f9847ef25a146cd479697b26a963 The package wartsila-text-csv was found to contain malicious code. Source: ghsa-malware...

Malicious code in malicius-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede57271088779798df2bc6c486e25090d044d8dd9a821c55133d3af2aa46e9e The package malicius-pdf was found to contain malicious code. Source: ghsa-malware df5f61561f8b0dfa30e2b5bf91f7257c1f8672ff2f66928f43c3402b3250e263 A...

SUSE CVE-2022-50632

In the Linux kernel, the following vulnerability has been resolved: drivers: perf: marvellcn10k: Fix hotplug callback leak in tadpmuinit tadpmuinit won't remove the callback added by cpuhpsetupstatemulti when platformdriverregister failed. Remove the callback by cpuhpremovemultistate in fail path...

SUSE CVE-2023-53854

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8186: Fix use-after-free in driver remove path When devm runs function in the "remove" path for a device it runs them in the reverse order. That means that if you have parts of your driver that aren't using devm...

PT-2025-50525

Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without...

CVE-2025-66456

Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication. Versions 1.4.0 through 1.4.16 contain a prototype pollution vulnerability in mergeDeep after merging results of two standard schema validations with the same key. Due to...