1580 matches found
MAL-2025-601 Malicious code in @komoot/kvstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 69080cf029fa20c98da2bad77409a3d11fedade172f91af674b8161e64755928 The OpenSSF Package Analysis project identified '@komoot/kvstore' @ 5.5.6 npm as malicious. It is considered malicious because: - The package...
OPENSUSE-SU-2025:14712-1 python311-pydantic-2.10.6-1.1 on GA media
These are all security issues fixed in the python311-pydantic-2.10.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14708-1 owasp-modsecurity-crs-4.9.0-1.1 on GA media
These are all security issues fixed in the owasp-modsecurity-crs-4.9.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14707-1 openvpn-2.6.10-5.1 on GA media
These are all security issues fixed in the openvpn-2.6.10-5.1 package on the GA media of openSUSE Tumbleweed...
MAL-2025-1989 Malicious code in reque (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8ce48406d7fce137de7e9a500179d7d6fcc5857714587372c977c5d6793cad30 Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...
MAL-2025-512 Malicious code in linkedin-checkout (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1007e3b603874be7c1b16b45918cee3421169f7c44f4a1b302c8e1710f14402a The OpenSSF Package Analysis project identified 'linkedin-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...
MAL-2025-435 Malicious code in dropbox-connect (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis afdb751e57da5540b343e220fab07e5aa40ad53e4bf33fbadb1e8f53d8469261 The OpenSSF Package Analysis project identified 'dropbox-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-423 Malicious code in coinbase-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10ee2dbfcb931534dd6bde1724a8a1c8a687f682a638caf4dfb5750a259402de The OpenSSF Package Analysis project identified 'coinbase-service' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
HCL BigFix Patch Management 代码问题漏洞
HCL BigFix Patch Management is a comprehensive patch management solution from HCL Corporation, USA, designed to help organizations effectively manage and deploy security and non-security patches for operating systems and applications. A security vulnerability exists in HCL BigFix Patch Management...
MAL-2025-329 Malicious code in ai-plugin-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 375f6ac1b62a76dd86681b0fc33bfe8a4162eb0ff032e0d0c96e5bb8735d7953 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
RHSA-2025:0402 Red Hat Security Advisory: iperf3 security update
Bulletin has no description...
OPENSUSE-SU-2025:14667-1 nvidia-modprobe-565.77-1.1 on GA media
These are all security issues fixed in the nvidia-modprobe-565.77-1.1 package on the GA media of openSUSE Tumbleweed...
MAL-2025-220 Malicious code in prem-babu-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e749c21a26a377a26000dd72c19e7a3d7e331ead388c3dfdecce559de1dd6db4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in markets-history-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cb43cd274b13e9601b8d4fa5c53f260feb6f9a2d4fde9e60c555c520153bd6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-142 Malicious code in next-refresh-token (npm)
This package executes a post-install script to collect system data and sends it to a remote server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1d44ee35f1e7a2f1a815de12ce539b2c3ffcb9ef5dc72eb632de64e000cf1b7 Any computer that has this package installed or runni...
OPENSUSE-SU-2025:14658-1 amazon-ssm-agent-3.3.1611.0-1.1 on GA media
These are all security issues fixed in the amazon-ssm-agent-3.3.1611.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14631-1 dpdk-23.11.1-4.1 on GA media
These are all security issues fixed in the dpdk-23.11.1-4.1 package on the GA media of openSUSE Tumbleweed...
MAL-2025-68 Malicious code in kiota-typescript (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=-...