MAL-2025-192578 Malicious code in xboxlive-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa54accd06c11d8f868fa0bc7915782404360d01db3c5f80d735584ca984dc8 The package xboxlive-auth was found to contain malicious code. Source: ghsa-malware 330ca3dbdf0006df9f2a21edc3027e6f158c2ee2b4f7c26498a386198e869878...

Malicious code in xboxlive-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa54accd06c11d8f868fa0bc7915782404360d01db3c5f80d735584ca984dc8 The package xboxlive-auth was found to contain malicious code. Source: ghsa-malware 330ca3dbdf0006df9f2a21edc3027e6f158c2ee2b4f7c26498a386198e869878...

Malicious code in bignumex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c839a719fb3ac340e251cb4eb34af0d9240de8d7e9f13605963617d9e14929b3 The package bignumex was found to contain malicious code. Source: ghsa-malware 32884ff132ca375f235dd1d6e843a3178d5777c11127c3f8f155472d2f26a455 Any...

MAL-2025-192574 Malicious code in bignumex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c839a719fb3ac340e251cb4eb34af0d9240de8d7e9f13605963617d9e14929b3 The package bignumex was found to contain malicious code. Source: ghsa-malware 32884ff132ca375f235dd1d6e843a3178d5777c11127c3f8f155472d2f26a455 Any...

Malicious code in polygon-src (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b975bdc3690d0deccba20490d0c56eec9e073ff48c7f949d5c9554489445ff2 The package polygon-src was found to contain malicious code. Source: ghsa-malware f3e7ff8566f8fc6fd21a8bcad4e3d2684026f6e9eb0a5ac2ccff5d46112ac99e An...

MAL-2025-192573 Malicious code in @revvity-signals/chemdraw-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53a6ff6ab4af77539873f6d418625d58f5d11a3fedda42efb25b91585218bbf The package @revvity-signals/chemdraw-js was found to contain malicious code. Source: ghsa-malware...

Malicious code in sd-skbms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d7af5c9829af6d62bf3237e014e1a9a6cbcd30be7eb56096229f226428f607 The package sd-skbms was found to contain malicious code. Source: ghsa-malware 9cf1a086ee102f5bbaa7b18b6512f3457de46a88a240dd3acda1bcfffe28f58c Any...

MAL-2025-192576 Malicious code in sd-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429e5a82bf0260fda2c531fb7909cf8b8417e424119df889ee7bad0ca4b439c2 The package sd-security was found to contain malicious code. Source: ghsa-malware e295e65302840407a5f64ae51ff2616121573aa518cd29d40198edf692c604de An...

Malicious code in sd-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429e5a82bf0260fda2c531fb7909cf8b8417e424119df889ee7bad0ca4b439c2 The package sd-security was found to contain malicious code. Source: ghsa-malware e295e65302840407a5f64ae51ff2616121573aa518cd29d40198edf692c604de An...

Malicious code in phx-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b09229dc15cf8c3ce04a8a0a7e5cb43d43587ada9469f2a238c46a52927f94d The package phx-core was found to contain malicious code. Source: ghsa-malware 44cd2845eda5ed69922e3450a19b821ff762b61ea14e981648e9637faafcee3d Any...

MAL-2025-192572 Malicious code in phx-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b09229dc15cf8c3ce04a8a0a7e5cb43d43587ada9469f2a238c46a52927f94d The package phx-core was found to contain malicious code. Source: ghsa-malware 44cd2845eda5ed69922e3450a19b821ff762b61ea14e981648e9637faafcee3d Any...

Malicious code in paypal-scripts-server-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba55fed7af17fadd676b95594de23778a414dc138beda86d133775a45fdcb03c The package paypal-scripts-server-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in @mohamed1687/iut-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c488ccf33f70ad27f3dba325a7686c40ac429f84d8ae53d608dc8103e1320adb The package @mohamed1687/iut-encrypt was found to contain malicious code. Source: ghsa-malware...

CVE-2025-40219

In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV Before disabling SR-IOV via config space accesses to the parent PF, sriovdisable first removes the PCI devices representing the VFs. Since commit 9d16947b7583...

CVE-2025-14365

The Eyewear prescription form plugin for WordPress (WordPress Eyewear prescription form) is affected by CVE-2025-14365. A Missing Authorization flaw in the RemoveItems AJAX action exists in all versions up to 6.0.1, enabling unauthenticated attackers to delete arbitrary WooCommerce product catego...

CVE-2025-14365 Eyewear prescription form <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary WooCommerce Category Deletion

The Eyewear prescription form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.0.1. This is due to missing capability checks on the RemoveItems AJAX action. This makes it possible for unauthenticated attackers to delete arbitrary WooCommerce...

Malicious code in kashif-mallah-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3015dc78458d21da40c01cf159c54f0298cd4ce7ea2604eecc18a7ea906cdd The package kashif-mallah-fca was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192560 Malicious code in kashif-mallah-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3015dc78458d21da40c01cf159c54f0298cd4ce7ea2604eecc18a7ea906cdd The package kashif-mallah-fca was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192559 Malicious code in iraza2-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7307c50f4f14642add677ac343109c8691dc3c5e67a0de88d27ed958e9593b The package iraza2-fca was found to contain malicious code. Source: ghsa-malware 5f0c32bd90ff347b69dae6471a8099e36ac566490bfa361193fc59f1c53785d4 Any...

Malicious code in cms_comp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7762e8867157bd05bfa8858e8f90ecd85ed0d6cf08c2435d264b9c61ad3420de The package cmscomp was found to contain malicious code. Source: ghsa-malware e58e38c37e8492486fd771954f0b1906c083a4dd5741600ca28a0bed5dd919a7 Any...