CLSA-2026-1785917668 TuxCare security update for 36 packages (3 CVEs)

TuxCare rebuilt 36 packages to address 3 CVEs. Fixed in 7.0.109-tuxcare.4...

CLSA-2026-1785204577 TuxCare security update for 6 packages (1 CVE)

TuxCare rebuilt 6 packages to address 1 CVE. Fixed in 19.2.0-tuxcare.6...

CLSA-2026-1784683020 TuxCare security update for io.netty (2 CVEs)

TuxCare rebuilt 46 io.netty packages to address 2 CVEs. Fixed in 4.1.73.Final-tuxcare.2...

CLSA-2026-1779065207 TuxCare security update for 86 packages (2 CVEs)

TuxCare rebuilt 86 packages to address 2 CVEs. Fixed in 9.4.62.tuxcare0001...

CLSA-2026-1778546710 TuxCare security update for 36 packages (1 CVE)

TuxCare rebuilt 36 packages to address 1 CVE. Fixed in 7.0.109-tuxcare.1...

CLSA-2026-1775781157 TuxCare security update for 86 packages (2 CVEs)

TuxCare rebuilt 86 packages to address 2 CVEs. Fixed in 9.4.61.tuxcare0001...

CLSA-2026-1773879458 TuxCare security update for 86 packages (2 CVEs)

TuxCare rebuilt 86 packages to address 2 CVEs. Fixed in 9.4.60.tuxcare0001...

CLSA-2025-1762906009 TuxCare security update for ch.qos.logback (4 CVEs)

TuxCare rebuilt 6 ch.qos.logback packages to address 4 CVEs. Fixed in 1.1.7-tuxcare.1...

CVE-2008-3112 vulnerabilities

Vulnerabilities for packages: openjdk-11-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-8-openj9...

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

Cybersecurity researchers have discovered 36 malicious packages in the npm registry that are disguised as Strapi CMS plugins but come with different payloads to facilitate Redis and PostgreSQL exploitation, deploy reverse shells, harvest credentials, and drop a persistent implant. "Every package...

Malicious Package

Overview strapi-plugin-health is a malicious package. This package contains malicious code that conceals a command-and-control agent and credential harvester. A malicious actor published a coordinated campaign of thirty-six packages disguised as community Strapi CMS plugins. These packages aren't...

Malicious Package

Overview strapi-plugin-config is a malicious package. This package contains malicious code that conceals a command-and-control agent and credential harvester. A malicious actor published a coordinated campaign of thirty-six packages disguised as community Strapi CMS plugins. These packages aren't...

Malicious Package

Overview strapi-plugin-nordica-api is a malicious package. This package contains malicious code that conceals a command-and-control agent and credential harvester. A malicious actor published a coordinated campaign of thirty-six packages disguised as community Strapi CMS plugins. These packages...

Malicious Package

Overview strapi-plugin-nordica-sync is a malicious package. This package contains malicious code that conceals a command-and-control agent and credential harvester. A malicious actor published a coordinated campaign of thirty-six packages disguised as community Strapi CMS plugins. These packages...