Malicious code in higgs-bellatrix-resolvers-typeorm (npm)

The package higgs-bellatrix-resolvers-typeorm was found to contain malicious code...

Malicious code in resolvers-uglify-js-exobiology-subduction (npm)

The package resolvers-uglify-js-exobiology-subduction was found to contain malicious code...

MAL-2025-29536 Malicious code in postcss-darkenergy-hermes-resolvers (npm)

The package postcss-darkenergy-hermes-resolvers was found to contain malicious code...

MAL-2025-32134 Malicious code in resolvers-prettier-stylelint-quasar-bulma (npm)

The package resolvers-prettier-stylelint-quasar-bulma was found to contain malicious code...

MAL-2025-27519 Malicious code in nightmare-markdownlint-resolvers-frontend (npm)

The package nightmare-markdownlint-resolvers-frontend was found to contain malicious code...

MAL-2025-32135 Malicious code in resolvers-pyxis-chakra-ui-scripts (npm)

The package resolvers-pyxis-chakra-ui-scripts was found to contain malicious code...

Malicious code in postcss-darkenergy-hermes-resolvers (npm)

The package postcss-darkenergy-hermes-resolvers was found to contain malicious code...

Malicious code in tethys-singularitarianism-resolvers-quantum (npm)

The package tethys-singularitarianism-resolvers-quantum was found to contain malicious code...

Malicious code in jwt-convict-dependencies-resolvers (npm)

The package jwt-convict-dependencies-resolvers was found to contain malicious code...

MAL-2025-21913 Malicious code in greatfilter-resolvers-query-greatfilter (npm)

The package greatfilter-resolvers-query-greatfilter was found to contain malicious code...

MAL-2025-36754 Malicious code in tethys-singularitarianism-resolvers-quantum (npm)

The package tethys-singularitarianism-resolvers-quantum was found to contain malicious code...

MAL-2025-23091 Malicious code in impulse-cluster-gravitationalwave-resolvers (npm)

The package impulse-cluster-gravitationalwave-resolvers was found to contain malicious code...

Malicious code in impulse-cluster-gravitationalwave-resolvers (npm)

The package impulse-cluster-gravitationalwave-resolvers was found to contain malicious code...

Malicious code in phoebe-callback-cressida-resolvers (npm)

The package phoebe-callback-cressida-resolvers was found to contain malicious code...

MAL-2025-15805 Malicious code in blazar-comet-toml-resolvers (npm)

The package blazar-comet-toml-resolvers was found to contain malicious code...

MAL-2025-22426 Malicious code in higgs-bellatrix-resolvers-typeorm (npm)

The package higgs-bellatrix-resolvers-typeorm was found to contain malicious code...

MAL-2025-32133 Malicious code in resolvers-less-loader-fornax-castor (npm)

The package resolvers-less-loader-fornax-castor was found to contain malicious code...

Amazon Linux 2 : unbound (ALASUNBOUND-1.17-2025-005)

The version of unbound installed on the remote host is prior to 1.17.0-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2UNBOUND-1.17-2025-005 advisory. A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that...

unbound: Unbound Cache poisoning

A cache poisoning flaw was found in Unbound. Resolvers supporting EDNS Client Subnet ECS must segregate outgoing queries to accommodate different outgoing ECS information. This issue reopens resolvers to a birthday paradox attack, known as the Rebirthday Attack, which attempts to match the DNS...

UBUNTU-CVE-2025-5994

A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet ECS. Unbound is also vulnerable when compiled with ECS support, i.e., '--enable-subnet', AND configured to send ECS information along with queries to...