Improper Authentication

Overview github.com/nats-io/nats-server/v2/server is an A simple, secure and performant communications system for digital systems, services and devices. Affected versions of this package are vulnerable to Improper Authentication in the parser fast path for inter-server connections, which applies ...

Malicious Package

Overview preview-server-auth is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in preview-server-auth-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 923e18277dc972e221ab7a161e65c18219ff037b3a347b86f86df7f6cba1bcfb The OpenSSF Package Analysis project identified...

MAL-2025-5993 Malicious code in preview-server-auth-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 923e18277dc972e221ab7a161e65c18219ff037b3a347b86f86df7f6cba1bcfb The OpenSSF Package Analysis project identified...

Malicious code in preview-server-auth-bounty (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in preview-server-auth-test (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5821 Malicious code in preview-server-auth-test (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in preview-server-auth (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c061ebafc271130fff7da4c0ba73b6e359b1a785e08a54972432edb83ff6b13 Any computer that has this package installed or running should be considered...

MAL-2025-5820 Malicious code in preview-server-auth (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c061ebafc271130fff7da4c0ba73b6e359b1a785e08a54972432edb83ff6b13 Any computer that has this package installed or running should be considered...

MAL-2025-2254 Malicious code in ee-server-auth-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32fbc3ea50c42c26476bf7cb134539c929e31be4c5e816c994e529e00b5ebf47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SuSE 11.2 / 11.3 Security Update : openssl-certs (SAT Patch Numbers 8681 / 8682)

openssl-certs was updated with the current certificate data available from mozilla.org. Changes : - Updated certificates to revision 1.95 Distrust a sub-ca that issued google.com certificates. 'Distrusted AC DG Tresor SSL'. bnc854367 Many CA updates from Mozilla : - new:...

ca-certificates-mozilla: add, remove or blacklist some certificates (important)

The Mozilla CA certificates package was updated to match the current Mozilla revision 1.95 of certdata.txt. It blacklists some misused certificate authorities, adds some new and adjusts some others. On openSUSE 13.1 a problem with names was also fixed. distrust: AC DG Tresor SSL bnc854367 new:...