13108 matches found
MAL-2025-49210 Malicious code in epic-ui-toolkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70949be3dd1355e16392906c6422a9ddb025a8bddeecd89cf7911365e43670e The package epic-ui-toolkit was found to contain malicious code...
MAL-2025-49032 Malicious code in prefer-arrow (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd4c923d3d6c399e77c6af5aa1cbd1e4712cb7bd89045f7ad31667227e6e3bd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MINI-X2C7-QP7V-3GQ6
Bulletin has no description...
MAL-2025-48711 Malicious code in ldhemrdhs92011 (npm)
The package ldhemrdhs92011 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-48672 Malicious code in dhqr92004 (npm)
The package dhqr92004 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-48701 Malicious code in ldhemrdhs60152 (npm)
The package ldhemrdhs60152 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-48808 Malicious code in circuit-runtime (npm)
--- -= Per source details. Do not edit below this line.=-...
Security update for openssl-1_1-livepatches
This update for openssl-11-livepatches fixes the following issues: CVE-2025-9230: incorrect check of key size can lead to out-of-bounds read and write in RFC 3211 KEK unwrap bsc1250410. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
Malicious code in shiprocket-invoice-export (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in yugabyte_cloud (npm)
The package yugabytecloud was found to contain malicious code...
MAL-2025-48490 Malicious code in didirce (npm)
The package didirce was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
BIT-REDIS-2025-32023 Redis allows out of bounds writes in hyperloglog commands leading to RCE
Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The...
MAL-2025-48505 Malicious code in sb_wm_integrator (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
EUVD-2020-21409
Malware in sbrugna...
EUVD-2021-24904
Malware in sbrugna...
EUVD-2019-10646
Malware in sbrugna...
EUVD-2019-8213
Malware in sbrugna...
EUVD-2019-7178
Malware in sbrugna...