MAL-2025-40288 Malicious code in yankee-vxg-project (npm)

The package yankee-vxg-project was found to contain malicious code...

MAL-2025-29732 Malicious code in project-0ip1w-quebec (npm)

The package project-0ip1w-quebec was found to contain malicious code...

MAL-2025-37272 Malicious code in tttstats (npm)

The package tttstats was found to contain malicious code...

Malicious code in @zalastax/nolb-ph- (npm)

The package @zalastax/nolb-ph- was found to contain malicious code...

MAL-2025-34645 Malicious code in tectonic-virgo-janus-steganography (npm)

The package tectonic-virgo-janus-steganography was found to contain malicious code...

MAL-2025-33196 Malicious code in sierra-delta-bzeq (npm)

The package sierra-delta-bzeq was found to contain malicious code...

MAL-2025-11972 Malicious code in @zalastax/nolb-idy (npm)

The package @zalastax/nolb-idy was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-38157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath9khtc: Abort software beacon handling if disabled A malicious USB device can send a WMISWBAEVENTID event from an ath9khtc-managed device before beaconi...

RHSA-2025:12524 Red Hat Security Advisory: redis security update

Bulletin has no description...

MAL-2025-6749 Malicious code in pexels-figma (npm)

The package communicates with a domain associated with malicious activity...

MGASA-2025-0217 Updated wxgtk packages fix security vulnerability

In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL...

MAL-2025-6717 Malicious code in ent-profile-unauth-stop (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6688 Malicious code in @sangith/eslint-config (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6669 Malicious code in wild-pet-rest-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6643 Malicious code in npm-ot-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6533 Malicious code in kwargs (PyPI)

--- -= Per source details. Do not edit below this line.=-...

DSA-5969-1 redis - security update

Bulletin has no description...

MAL-2025-6772 Malicious code in tms-spike (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-53357

GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.78 through 10.0.18, a connected user can alter the reservations of another user. Thi...

GO-2025-3809 Chall-Manager's HTTP Gateway is vulnerable to DoS due to missing header timeout in github.com/ctfer-io/chall-manager

Chall-Manager's HTTP Gateway is vulnerable to DoS due to missing header timeout in github.com/ctfer-io/chall-manager...