kernel: md-raid10: fix KASAN warning

In the Linux kernel, the following vulnerability has been resolved: md-raid10: fix KASAN warning There's a KASAN warning in raid10removedisk when running the lvm test lvconvert-raid-reshape.sh. We fix this warning by verifying that the value "number" is valid. BUG: KASAN: slab-out-of-bounds in...

CLSA-2025-1764847045 jackson-annotations: Fix of CVE-2025-52999

Rebuilt with the CVE-2025-52999: fixed jackson-core version - Fixed build: removed unavailable jackson-parent dependencies...

Malicious code in elf-stats-lanternlit-snowman-834 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5ba8a53d8eaf81612c735ecd48fa5c485199e190ba2e4047f1160d5ad1d9dc The package elf-stats-lanternlit-snowman-834 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-bright-cocoa-293 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0977b2c356749420c94387d2037758a63eca2cf223b813843e975652cdc9a2d3 The package elf-stats-bright-cocoa-293 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192298 Malicious code in elf-stats-candlelit-marshmallow-663 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cf5bd84066a57d6f168967adc62dd26c49c4095817e6db922dc357f63f824e The package elf-stats-candlelit-marshmallow-663 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-mulled-ornament-810 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a68193ecbc69141a7ed610f69110b64551adf4ac175894416841205703c9db3 The package elf-stats-mulled-ornament-810 was found to contain malicious code. Source: ghsa-malware...

Malicious code in beep-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fb7d61c321c68fa3a32e4203e38cb8655096fa5022defb8a301465b6175111 The package beep-types was found to contain malicious code. Source: ghsa-malware 66ecb0f8992d72a62cefb71f46fb521f18db115c524a498cddbe82d3e98539ca Any...

MAL-2025-192296 Malicious code in beep-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fb7d61c321c68fa3a32e4203e38cb8655096fa5022defb8a301465b6175111 The package beep-types was found to contain malicious code. Source: ghsa-malware 66ecb0f8992d72a62cefb71f46fb521f18db115c524a498cddbe82d3e98539ca Any...

MAL-2025-192300 Malicious code in elf-stats-marzipan-cocoa-562 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5eef2a7b97397b3b317b2e74da3cf23e6c43147a144bed8c3fbcbb35ca6249f The package elf-stats-marzipan-cocoa-562 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192299 Malicious code in elf-stats-lanternlit-snowman-834 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5ba8a53d8eaf81612c735ecd48fa5c485199e190ba2e4047f1160d5ad1d9dc The package elf-stats-lanternlit-snowman-834 was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview hast-util-to-mdast9 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview unified10 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in elf-stats-jubilant-ornament-641 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b627f81ef3d4b49b83a86d60778eb2510e4d1cc4a7d0786394c115f194b9264 The package elf-stats-jubilant-ornament-641 was found to contain malicious code. Source: ghsa-malware...

Malicious code in email-regexed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a196eb68421b32096da5ff260a7a9aca6f9d74937768b62ae4aff437c0c89729 The package email-regexed was found to contain malicious code. Source: ghsa-malware 0dac0855a64ab32c42fcd0ab7694e81f0ca1ba1cbedb27990dad05e7162c51e1...

MAL-2025-192291 Malicious code in email-regexed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a196eb68421b32096da5ff260a7a9aca6f9d74937768b62ae4aff437c0c89729 The package email-regexed was found to contain malicious code. Source: ghsa-malware 0dac0855a64ab32c42fcd0ab7694e81f0ca1ba1cbedb27990dad05e7162c51e1...

Malicious code in email-validated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16af72446800f2251ecdda400ad30c23637f628d1487ae5c911bb4283e3fe10c The package email-validated was found to contain malicious code. Source: ghsa-malware 9f2a0d9794c8d949cc051fe3c306af63ddb55b6848d0607ef1f5d332585a2fc...

Malicious code in dotenv-intend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b29ae1386b4f6a14de72979eae00fc96b33b8a080975db5c8eb8917d23fdeff The package dotenv-intend was found to contain malicious code. Source: ghsa-malware 64a31dce3bccc8134695abbe65011f655e810a0a28726ce2d60668e3689ab605...

MAL-2025-192290 Malicious code in dotenv-intend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b29ae1386b4f6a14de72979eae00fc96b33b8a080975db5c8eb8917d23fdeff The package dotenv-intend was found to contain malicious code. Source: ghsa-malware 64a31dce3bccc8134695abbe65011f655e810a0a28726ce2d60668e3689ab605...

Malicious code in buffer-envjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328f0f326f30ba6e46eee18a532f81cdd6afdbd656e79c16ec2158af7f924c8f The package buffer-envjs was found to contain malicious code. Source: ghsa-malware 7dc4f4a51201db42dd81059708300e05eabba51b1ab48793c8f37d582fd24d93 A...

CVE-2025-13109

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.2 via the "woofaddquery" and "woofremovequery" functions due to missing validation on a user controlled key. This makes it...