1580 matches found
MAL-2025-1328 Malicious code in bitmart-test (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ca51f117bee2cff1b712ba689ce844c19ec597faf4268714f41fb013e464c6e Any computer that has this package install...
MAL-2025-1308 Malicious code in gate-production (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e5829c327248d41abf070c9c23598e436a2fefc55efc2986ff6ca1ba771ef61 Any computer that has this package install...
OPENSUSE-SU-2025:14805-1 postgresql13-13.19-1.1 on GA media
These are all security issues fixed in the postgresql13-13.19-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-0376 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ee-fips, gitlab-pages, gitlab-ee-fips, gitlab-pages-fips, gitlab-runner-fips, gitlab-cng, gitlab-rails-ee, gitlab-cng-fips, gitlab-ee...
OPENSUSE-SU-2025:14797-1 kernel-firmware-serial-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-serial-20250206-1.1 package on the GA media of openSUSE Tumbleweed...
GHSA-37WC-H8XC-5HC4 vulnerabilities
Vulnerabilities for packages: shadowsocks-rust, linkerd2-proxy...
DSA-5863-1 libtasn1-6 - security update
Bulletin has no description...
CVE-2024-21502
Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemathmul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free, arbitrary...
OPENSUSE-SU-2025:14731-1 MozillaThunderbird-128.7.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-128.7.0-1.1 package on the GA media of openSUSE Tumbleweed...
MAL-2025-1034 Malicious code in com.siccity.gltfutility (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 201fb69ebbdbf7099f322edee00ed68a1cd7e707883db97efe712a72155f15e2 Any computer that has this package installed or running should be considered...
MAL-2025-1013 Malicious code in apple-sdk (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4113cf662e414936dfc540b2ebc7c134b8d83e46635daadf59a0105f86c70feb Any computer that has this package installed or running should be considered...
MAL-2025-1011 Malicious code in @infinid-indonesia/ui-kit (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4eeca2bfa3c0d32dbee35f8956b2e79049540d209630206d040f2573ff118c6 Any computer that has this package installed or running should be considered...
MAL-2025-1037 Malicious code in guests (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90c450f222886a91d7c733fcfbdf4a4b5104c0b4a1d1931f79e0bea1201f1398 Any computer that has this package installed or running should be considered...
Malicious code in expense-management (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-774 Malicious code in @mrpudidi/gravatar (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-730 Malicious code in @wongapl/sliders (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-744 Malicious code in jqtools-overlay (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in theme-check-vscode (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-664 Malicious code in google.kythe (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfd92576cb52e3439544b9c66be7914a1f7326c8ac3ab1ab692d694ae00d5806 Any computer that has this package installed or running should be considered...