Malicious code in twitch-grunt-smartling-sdk (npm)

The package twitch-grunt-smartling-sdk was found to contain malicious code...

Malicious code in kindle-fast-metrics-javascript-sdk (npm)

The package kindle-fast-metrics-javascript-sdk was found to contain malicious code...

Malicious code in react-native-ezio-face-id-sdk (npm)

The package react-native-ezio-face-id-sdk was found to contain malicious code...

MAL-2025-26379 Malicious code in mind-sdk-web (npm)

The package mind-sdk-web was found to contain malicious code...

MAL-2025-17327 Malicious code in com.microsoft.azure.spatial-anchors-sdk.windows (npm)

The package com.microsoft.azure.spatial-anchors-sdk.windows was found to contain malicious code...

MAL-2025-32858 Malicious code in sdk-workshop (npm)

The package sdk-workshop was found to contain malicious code...

Malicious code in mag-sdk-core (npm)

The package mag-sdk-core was found to contain malicious code...

Malicious code in com.microsoft.azure.spatial-anchors-sdk.windows (npm)

The package com.microsoft.azure.spatial-anchors-sdk.windows was found to contain malicious code...

Malicious code in @citrixgs/g11n-sdk-react (npm)

The package @citrixgs/g11n-sdk-react was found to contain malicious code...

Malicious code in schibsted-identity-sdk (npm)

The package schibsted-identity-sdk was found to contain malicious code...

MAL-2025-24847 Malicious code in kyc-sdk-javascript (npm)

The package kyc-sdk-javascript was found to contain malicious code...

MAL-2025-26619 Malicious code in molpay-mobile-sdk (npm)

The package molpay-mobile-sdk was found to contain malicious code...

MAL-2025-37381 Malicious code in twitch-grunt-smartling-sdk (npm)

The package twitch-grunt-smartling-sdk was found to contain malicious code...

MAL-2025-24537 Malicious code in kinvey-phonegap-angular-sdk (npm)

The package kinvey-phonegap-angular-sdk was found to contain malicious code...

MAL-2025-6971 Malicious code in solana-pump-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 45d581c17210e8be2e111136cc9853e7c698eaabd46c44482037ba1436c5b9a0 The OpenSSF Package Analysis project identified 'solana-pump-sdk' @ 1.4.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in solana-pump-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 45d581c17210e8be2e111136cc9853e7c698eaabd46c44482037ba1436c5b9a0 The OpenSSF Package Analysis project identified 'solana-pump-sdk' @ 1.4.0 npm as malicious. It is considered malicious because: - The package...

cn.jarkata:jarkata-encrypt (1.0.0), cn.ponfee:commons-core (>=1.1, <=1.4) +490 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-ext-jdk18on (>=1.71, <=1.78.1)

org.bouncycastle:bcprov-ext-jdk18on MAVEN version =1.71, =1.1, =2.4.1, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50,...

Malicious code in @mobile-sdk/videoads-ad-video-player-html5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2025-7195

Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, usersetup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used...

operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd

Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, usersetup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used...