CLSA-2026-1785917668 TuxCare security update for 36 packages (3 CVEs)

TuxCare rebuilt 36 packages to address 3 CVEs. Fixed in 7.0.109-tuxcare.4...

CLSA-2026-1785204577 TuxCare security update for 6 packages (1 CVE)

TuxCare rebuilt 6 packages to address 1 CVE. Fixed in 19.2.0-tuxcare.6...

CLSA-2026-1784683020 TuxCare security update for io.netty (2 CVEs)

TuxCare rebuilt 46 io.netty packages to address 2 CVEs. Fixed in 4.1.73.Final-tuxcare.2...

CLSA-2026-1784250511 TuxCare security update for com.thoughtworks.xstream (2 CVEs)

TuxCare rebuilt 6 com.thoughtworks.xstream packages to address 2 CVEs. Fixed in 1.4.17-tuxcare.2...

CLSA-2026-1783040469 TuxCare security update for 36 packages (1 CVE)

TuxCare rebuilt 36 packages to address 1 CVE. Fixed in 7.0.109-tuxcare.2...

CLSA-2026-1779065207 TuxCare security update for 86 packages (2 CVEs)

TuxCare rebuilt 86 packages to address 2 CVEs. Fixed in 9.4.62.tuxcare0001...

CLSA-2026-1778546710 TuxCare security update for 36 packages (1 CVE)

TuxCare rebuilt 36 packages to address 1 CVE. Fixed in 7.0.109-tuxcare.1...

CLSA-2026-1777855417 TuxCare security update for 6 packages (10 CVEs)

TuxCare rebuilt 6 packages to address 10 CVEs. Fixed in 1.9.2-tuxcare.1...

CLSA-2026-1775867597 TuxCare security update for 6 packages (1 CVE)

TuxCare rebuilt 6 packages to address 1 CVE. Fixed in 4.0.3-tuxcare.1...

CLSA-2026-1776040415 TuxCare security update for 88 packages (4 CVEs)

TuxCare rebuilt 88 packages to address 4 CVEs. Fixed in 9.4.53.v20231009-tuxcare.3...

CLSA-2026-1775781157 TuxCare security update for 86 packages (2 CVEs)

TuxCare rebuilt 86 packages to address 2 CVEs. Fixed in 9.4.61.tuxcare0001...

CLSA-2026-1773879458 TuxCare security update for 86 packages (2 CVEs)

TuxCare rebuilt 86 packages to address 2 CVEs. Fixed in 9.4.60.tuxcare0001...

CLSA-2026-1770768565 TuxCare security update for org.eclipse.parsson (2 CVEs)

TuxCare rebuilt 6 org.eclipse.parsson packages to address 2 CVEs. Fixed in 1.0.0-tuxcare.1...

CLSA-2025-1762906009 TuxCare security update for ch.qos.logback (4 CVEs)

TuxCare rebuilt 6 ch.qos.logback packages to address 4 CVEs. Fixed in 1.1.7-tuxcare.1...

CLSA-2025-1764547660 TuxCare security update for 88 packages (1 CVE)

TuxCare rebuilt 88 packages to address 1 CVE. Fixed in 9.4.53.v20231009-tuxcare.2...

CLSA-2025-1738627240 TuxCare security update for org.springframework.boot (1 CVE)

TuxCare rebuilt 76 org.springframework.boot packages to address 1 CVE. Fixed in 2.7.18.tuxcare.4...

CVE-2008-3112 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-17-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-8-openj9, openjdk-26-openj9...

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

Cybersecurity researchers have discovered 36 malicious packages in the npm registry that are disguised as Strapi CMS plugins but come with different payloads to facilitate Redis and PostgreSQL exploitation, deploy reverse shells, harvest credentials, and drop a persistent implant. "Every package...

Malicious Package

Overview strapi-plugin-health is a malicious package. This package contains malicious code that conceals a command-and-control agent and credential harvester. A malicious actor published a coordinated campaign of thirty-six packages disguised as community Strapi CMS plugins. These packages aren't...

Malicious Package

Overview strapi-plugin-nordica-api is a malicious package. This package contains malicious code that conceals a command-and-control agent and credential harvester. A malicious actor published a coordinated campaign of thirty-six packages disguised as community Strapi CMS plugins. These packages...