MAL-2025-190503 Malicious code in applicationooks21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d963ea346580a62502bacede10e72568ab2766e2a79256363a3abf50cc3307 The package applicationooks21 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190505 Malicious code in dsidospsodlks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb1aad619cb83bf19801c9d9f377a11a0a0f84f6bab77b54a480ab82b4ea976 The package dsidospsodlks was found to contain malicious code. Source: ghsa-malware d8c8352b237d6bf265f491adb9648450fcaa22c21dd3ed14a9656d47a573ba2d...

Malicious code in integrator-filescrypt2025 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023077b3a9220f828d324d3d9faa0e5dc5cf520b016163672bd5c023284e3039 The package integrator-filescrypt2025 was found to contain malicious code. Source: ghsa-malware...

Malicious code in chai-proxify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90af91a26f042c0ac96b72df310de8ec15f6ab93634ff0547c9efb3e041cd15 The package chai-proxify was found to contain malicious code. Source: ghsa-malware 535f2bd89ddae3ece4cde5060e0e237009d5b0cdef1bce1061a3d420915b2e66 A...

MAL-2025-190504 Malicious code in chai-proxify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90af91a26f042c0ac96b72df310de8ec15f6ab93634ff0547c9efb3e041cd15 The package chai-proxify was found to contain malicious code. Source: ghsa-malware 535f2bd89ddae3ece4cde5060e0e237009d5b0cdef1bce1061a3d420915b2e66 A...

Malicious code in react-confetti-modern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a195b8307abbf7a2b6a5d4bd82b65aaad0891e87788e11d1a934707180631c The package react-confetti-modern was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwind-styled-scrollbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac987129deefb5aef175dc25c742373acfa189bdb1511017f6fff95a99e9ceb9 The package tailwind-styled-scrollbar was found to contain malicious code. Source: ghsa-malware...

DSA Kernel Heap Buffer Overflow DoS

The vulnerability of the kszswitchRemove function in the drivers/net/dsa/microchip/kszcommon.c file of the DSA kernel support driver for the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-13250: Improper Access Control

A vulnerability was detected in WeiYe-Jing datax-web up to 2.1.2. This impacts the function remove/update/pause/start/triggerJob of the component Job Handler. Performing manipulation results in improper access controls. The attack may be initiated remotely. The exploit is now public and may be us...

DataX-Web Access Control Vulnerability

DataX-Web is a distributed data synchronization tool developed on top of DataX by WeiYe's personal developer. An access control error vulnerability exists in DataX-Web 2.1.2 and earlier versions, which stems from incorrect operation of the function remove/update/pause/start/triggerJob in the...

CVE-2025-64753

grist-core is a spreadsheet hosting server. Prior to version 1.7.7, a user with only partial read access to a document could still access endpoints listing hashes for versions of that document and receive a full list of changes between versions, even if those changes contained cells, columns, or...

Malicious code in loger-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bae5da3bd8d27a466a9c283448407d51b93d85d73a97a5db78f46b3635cd3a4 The package loger-parser was found to contain malicious code. Source: ghsa-malware c75c0239d03c0dc3d95b5965598d3d59e96ce5a1826fc60aaba3dd34da283a2b A...

MAL-2025-190496 Malicious code in loger-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bae5da3bd8d27a466a9c283448407d51b93d85d73a97a5db78f46b3635cd3a4 The package loger-parser was found to contain malicious code. Source: ghsa-malware c75c0239d03c0dc3d95b5965598d3d59e96ce5a1826fc60aaba3dd34da283a2b A...

Malicious code in tailwindcss-setflex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d80169fb6c203bac400f4a79925a5a54eef1ef740164552a568e6e6604f9427 The package tailwindcss-setflex was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190495 Malicious code in chain-test-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3e0c036eeb1631fbe88e6fc1c18dc89f31a900e1d528bd2027a2aef1eb35a60 The package chain-test-async was found to contain malicious code. Source: ghsa-malware c1d03d8b6de88ac68ebdd7ea00a039ed4f3d071cda41ca8e038c5cad8eb212...

MAL-2025-190498 Malicious code in validator-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e37a6017e345fd411d1589cfff26c773d65d94f231505eae6ca3a90b448c4a The package validator-node was found to contain malicious code. Source: ghsa-malware d3f7ef04f70e6978a9f771255f136d634d2907c42c7acf71a42c4c93e7e5d333...

Malicious Package

Overview chai-test-async is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-190494 Malicious code in chai-test-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f220c85ce9af5bc025f22e269aaaf3af1c5853df736bcbb97331229c06b1c32 The package chai-test-async was found to contain malicious code. Source: ghsa-malware 5b8f7387cfa3c737fbb688f651f56f2174c2e831df5ded826ec25d8b7dab1bc...

SUSE CVE-2025-40186

In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqskfastopenremove in tcpconnrequest. syzbot reported the splat below in tcpconnrequest. 0 If a listener is closed while a TFO socket is being processed in tcpconnrequest, inetcskreqskqueueadd does not set reqsk-...

CVE-2025-64753 grist-core has insufficient access control in endpoints for comparisons between documents and versions

grist-core is a spreadsheet hosting server. Prior to version 1.7.7, a user with only partial read access to a document could still access endpoints listing hashes for versions of that document and receive a full list of changes between versions, even if those changes contained cells, columns, or...