MAL-2025-7407 Malicious code in @crabas0npm/neque-ex-dolorem (npm)

The package @crabas0npm/neque-ex-dolorem was found to contain malicious code...

MAL-2025-40999 Malicious code in zip-mp3-a-lbum-do-wnload-new-10692-xxxx-kh2rm-pfurnp (npm)

The package zip-mp3-a-lbum-do-wnload-new-10692-xxxx-kh2rm-pfurnp was found to contain malicious code...

MAL-2025-36578 Malicious code in test-mlw2-vires-apish (npm)

The package test-mlw2-vires-apish was found to contain malicious code...

MAL-2025-9651 Malicious code in @waitfortea2024/repellendus-distinctio-aliquam (npm)

The package @waitfortea2024/repellendus-distinctio-aliquam was found to contain malicious code...

MAL-2025-26793 Malicious code in mp3-do-wnload-file-to-day-204935-superstar-b7g5b-dxywxb (npm)

The package mp3-do-wnload-file-to-day-204935-superstar-b7g5b-dxywxb was found to contain malicious code...

MAL-2025-35037 Malicious code in test-mlw2-capon-feyer-sieve-siroc (npm)

The package test-mlw2-capon-feyer-sieve-siroc was found to contain malicious code...

MAL-2025-8909 Malicious code in @malware-test-serum-tidal-bloop-laths/test-mlw3-serum-tidal-bloop-laths (npm)

The package @malware-test-serum-tidal-bloop-laths/test-mlw3-serum-tidal-bloop-laths was found to contain malicious code...

Malicious code in tensorflowjs (npm)

Package is malicious due to code obfuscation, arbitrary command execution via childprocess.spawn, and suspicious postinstall script. --- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2024-40920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix suspicious rcu usage in brmstsetstate I converted brmstsetstate to RCU...

MAL-2025-6696 Malicious code in astro-benchmark (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Exploit for OS Command Injection in Gnu Bash

This is an extension for Burp Suite, a web application security testing tool. The extension, named "ActiveScan++", extends Burp's active and passive scanning capabilities to identify application behavior that may be of interest to advanced testers. It includes checks for potential host header...

Exploit for CVE-2025-54313

cve-2025-54313 Checks projects for compromised packages, suspi...

MAL-2025-6254 Malicious code in redux-init-rce (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 001436a444d94a1473a5f914d6f2ff7e18e622f232ca7b48be8c0126a70eb962 The OpenSSF Package Analysis project identified 'redux-init-rce' @...

MAL-2025-6253 Malicious code in dva-update-rce (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b95ece97aa3f5d58ea4fb2cedc0508d316d19bf5241465748806202bcd86c861 The OpenSSF Package Analysis project identified 'dva-update-rce' @...

Malicious code in tool-commitizen-adapter-xp (npm)

The package communicates with a domain associated with malicious activity...

UBUNTU-CVE-2025-38397

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix suspicious RCU usage warning When I run the NVME over TCP test in virtme-ng, I get the following "suspicious RCU usage" warning in nvmempathaddsysfslink: ''' 5.024557 T44 nvmet: Created nvm controller 1 for...

CVE-2025-38397 nvme-multipath: fix suspicious RCU usage warning

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix suspicious RCU usage warning When I run the NVME over TCP test in virtme-ng, I get the following "suspicious RCU usage" warning in nvmempathaddsysfslink: ''' 5.024557 T44 nvmet: Created nvm controller 1 for...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from suspicious RCU usage that may result in warnings...

MAL-2025-6078 Malicious code in chime-core-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb533ce212898abdb893a38eb8ade78a5a77d62616bb84b5e0cf00f93ffec6de Any computer that has this package installed or running should be considered...

MAL-2025-6214 Malicious code in ecinc-cloud-moaxmpp (npm)

Package exhibits multiple malicious behaviors: Office doc access/encryption, DB interaction, local storage clearing, arbitrary code execution, /dev/shm ref. The code includes a native bridge that allows it to execute arbitrary SQL queries on a mobile device’s database when used within a specific...