20984 matches found
Malicious code in color-string (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96d7c74748e121e50b19198355b3f8f9f8ba84bcfd1731896fcf4b9ebc76370 Any computer that has this package installed or running should be considered fully compromised. All...
MAL-2025-46973 Malicious code in color-string (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96d7c74748e121e50b19198355b3f8f9f8ba84bcfd1731896fcf4b9ebc76370 Any computer that has this package installed or running should be considered fully compromised. All...
Embedded Malicious Code
Overview color-string is a Parser and generator for CSS color strings Affected versions of this package are vulnerable to Embedded Malicious Code. This package version contains malicious code that monitors network traffic when run in a browser and targets crypto transactions. The injected malicio...
kernel-rt security update
An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...
PT-2025-44098
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the pinctrl subsystem where the return value of the pinmux ops::get function name function is not adequately checked. The pinmux generic get function...
PT-2025-37744
Name of the Vulnerable Software and Affected Versions: color-string version 2.1.1 Description: The npm publishing account for color-string was compromised following a phishing attack. Version 2.1.1 was published with a malicious payload designed to redirect cryptocurrency transactions within...
Malicious code in dependencies-backend-mutation-string (npm)
The package dependencies-backend-mutation-string was found to contain malicious code...
MAL-2025-46141 Malicious code in start-string-mensa-mocha (npm)
The package start-string-mensa-mocha was found to contain malicious code...
Malicious code in start-string-mensa-mocha (npm)
The package start-string-mensa-mocha was found to contain malicious code...
MAL-2025-43963 Malicious code in dependencies-backend-mutation-string (npm)
The package dependencies-backend-mutation-string was found to contain malicious code...
MAL-2025-46149 Malicious code in string-stratigraphy-alphard-markdown (npm)
The package string-stratigraphy-alphard-markdown was found to contain malicious code...
MAL-2025-46439 Malicious code in ultra-less-ethology-string (npm)
The package ultra-less-ethology-string was found to contain malicious code...
Malicious code in string-modifier-utils (npm)
The package string-modifier-utils was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-46148 Malicious code in string-modifier-utils (npm)
The package string-modifier-utils was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
OESA-2025-2155 gnuplot security update
Gnuplot is a portable command-line driven graphing utility for Linux, OS/2, MS Windows, OSX, VMS, and many other platforms. The source code is copyrighted but freely distributed i.e., you don't have to pay for it. It was originally created to allow scientists and students to visualize mathematica...
SUSE SLES15: postgresql15 / postgresql15-contrib / postgresql15-devel / etc (SUSE-SU-2025:00614-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:00614-1 advisory. Upgrade to 15.12: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings bsc1237093. Tenable h...
Security update for postgresql15
This update for postgresql15 fixes the following issues: Upgrade to 15.12: CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings bsc1237093. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
bpf: Reject %p% format string in bprintf-like helpers
...