MAL-2025-774 Malicious code in @mrpudidi/gravatar (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-744 Malicious code in jqtools-overlay (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-730 Malicious code in @wongapl/sliders (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in theme-check-vscode (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-664 Malicious code in google.kythe (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfd92576cb52e3439544b9c66be7914a1f7326c8ac3ab1ab692d694ae00d5806 Any computer that has this package installed or running should be considered...

MAL-2025-669 Malicious code in kibana-release-notes (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-601 Malicious code in @komoot/kvstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 69080cf029fa20c98da2bad77409a3d11fedade172f91af674b8161e64755928 The OpenSSF Package Analysis project identified '@komoot/kvstore' @ 5.5.6 npm as malicious. It is considered malicious because: - The package...

OPENSUSE-SU-2025:14712-1 python311-pydantic-2.10.6-1.1 on GA media

These are all security issues fixed in the python311-pydantic-2.10.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14708-1 owasp-modsecurity-crs-4.9.0-1.1 on GA media

These are all security issues fixed in the owasp-modsecurity-crs-4.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14707-1 openvpn-2.6.10-5.1 on GA media

These are all security issues fixed in the openvpn-2.6.10-5.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-1989 Malicious code in reque (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8ce48406d7fce137de7e9a500179d7d6fcc5857714587372c977c5d6793cad30 Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

MAL-2025-512 Malicious code in linkedin-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1007e3b603874be7c1b16b45918cee3421169f7c44f4a1b302c8e1710f14402a The OpenSSF Package Analysis project identified 'linkedin-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-435 Malicious code in dropbox-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis afdb751e57da5540b343e220fab07e5aa40ad53e4bf33fbadb1e8f53d8469261 The OpenSSF Package Analysis project identified 'dropbox-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-423 Malicious code in coinbase-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10ee2dbfcb931534dd6bde1724a8a1c8a687f682a638caf4dfb5750a259402de The OpenSSF Package Analysis project identified 'coinbase-service' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

HCL BigFix Patch Management 代码问题漏洞

HCL BigFix Patch Management is a comprehensive patch management solution from HCL Corporation, USA, designed to help organizations effectively manage and deploy security and non-security patches for operating systems and applications. A security vulnerability exists in HCL BigFix Patch Management...

MAL-2025-329 Malicious code in ai-plugin-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 375f6ac1b62a76dd86681b0fc33bfe8a4162eb0ff032e0d0c96e5bb8735d7953 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHSA-2025:0402 Red Hat Security Advisory: iperf3 security update

Bulletin has no description...

OPENSUSE-SU-2025:14667-1 nvidia-modprobe-565.77-1.1 on GA media

These are all security issues fixed in the nvidia-modprobe-565.77-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-220 Malicious code in prem-babu-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e749c21a26a377a26000dd72c19e7a3d7e331ead388c3dfdecce559de1dd6db4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in markets-history-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cb43cd274b13e9601b8d4fa5c53f260feb6f9a2d4fde9e60c555c520153bd6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...