Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack. The malicious package campaign, codenamed ViteVenom by Checkmarx, marks an expansion of ChainVeil , which was observed using...

GHSA-VF2M-468P-8V99 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, opensearch-dashboards, wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards-fips, gitlab-rails-ce-fips, lerna, saf, redisinsight, jitsucom-jitsu, kibana, langfuse, kubeflow-centraldashboard, kubeflow-katib, nextcloud-server, langfuse-fips, aw...

openSUSE Security Advisory (SUSE-SU-2026:0245-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7ghost (>=4.11.0 <=4.11.46), @igames/ghost (>=3.41.6 <=4.0.0-alpha.2) +5 more potentially affected by CVE-2024-34448 via @tryghost/members-csv (>=0.1.2 <=1.2.3)

@tryghost/members-csv NPM version =0.1.2, =4.11.0, =3.41.6, =0.1.0, =3.21.0, =5.4.1 - nshakhatghost =4.17.1 Source cves: CVE-2024-34448 Source advisory: OSV:GHSA-XGWH-CGV9-783V...