MAL-2025-32675 Malicious code in sanitize-runtime-test-dog-user (npm)

The package sanitize-runtime-test-dog-user was found to contain malicious code...

MAL-2025-23263 Malicious code in integer-execute-shell-runtime-protected (npm)

The package integer-execute-shell-runtime-protected was found to contain malicious code...

Malicious code in com.microsoft.azure.object-anchors.runtime (npm)

The package com.microsoft.azure.object-anchors.runtime was found to contain malicious code...

Malicious code in runtime-bundle-armi (npm)

The package runtime-bundle-armi was found to contain malicious code...

MAL-2025-23082 Malicious code in import-big-runtime-permission-web (npm)

The package import-big-runtime-permission-web was found to contain malicious code...

MAL-2025-20130 Malicious code in fabalous-runtime-web (npm)

The package fabalous-runtime-web was found to contain malicious code...

Malicious code in decorator-runtime-advance (npm)

The package decorator-runtime-advance was found to contain malicious code...

Malicious code in thread-await-function-runtime-balance (npm)

The package thread-await-function-runtime-balance was found to contain malicious code...

Malicious code in aws-ui-runtime (npm)

The package aws-ui-runtime was found to contain malicious code...

MAL-2025-15231 Malicious code in aws-ui-runtime (npm)

The package aws-ui-runtime was found to contain malicious code...

Malicious code in sanitize-runtime-test-dog-user (npm)

The package sanitize-runtime-test-dog-user was found to contain malicious code...

MAL-2025-15212 Malicious code in await-error-runtime-wind-gamma (npm)

The package await-error-runtime-wind-gamma was found to contain malicious code...

Malicious code in load-runtime-benchmark-hash-cluster (npm)

The package load-runtime-benchmark-hash-cluster was found to contain malicious code...

MAL-2025-26385 Malicious code in mindspin (npm)

The package mindspin was found to contain malicious code...

MAL-2025-29205 Malicious code in pi-async-runtime-report-sun (npm)

The package pi-async-runtime-report-sun was found to contain malicious code...

MAL-2025-32202 Malicious code in rho-rho-runtime-small-root (npm)

The package rho-rho-runtime-small-root was found to contain malicious code...

CVE-2025-54867

Youki is a container runtime written in Rust. Prior to version 0.5.5, if /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem. This issue has been patched in version 0.5.5...

CVE-2025-54867 Youki Symlink Following Vulnerability

Youki is a container runtime written in Rust. Prior to version 0.5.5, if /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem. This issue has been patched in version 0.5.5...

CVE-2025-54867

Youki (Rust-based container runtime) before v0.5.5 is vulnerable: if /proc and /sys in the rootfs are symbolic links, an attacker with local access could potentially gain access to the host root filesystem. Root cause: improper handling of symbolic links in rootfs; impact: high (host filesystem a...

CVE-2025-54867 Youki Symlink Following Vulnerability

Youki is a container runtime written in Rust. Prior to version 0.5.5, if /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem. This issue has been patched in version 0.5.5...