Malicious code in maybe-i-would-like-a-banana (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 662fcbfd490d5409f2a17a156785c7d82b81e2c57e0c67d1ae701ccf49fff1b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5405 Malicious code in es6modules-nodejs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 218c17a75c3af9325e1d26ff2b2feec20f788118052f29452038579a57a4bb40 Any computer that has this package installed or running should be considered...

MAL-2025-5446 Malicious code in online-learning-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1edfb9c66a33f5e0185fe0ee1fb376f5a4f7974933a07e53f9e23d3281d4fe83 Any computer that has this package installed or running should be considered...

Malicious code in online-learning-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 853a4095a2f08a67260f3c2220bc45ef9484b10db0a4f909560bf36485cb54cf Any computer that has this package installed or running should be considered...

Malicious code in meli-ai-chat-library (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fe9cef75ee52e8b6473470f69a31b8e7057f0fb632c88b89af63c14484d1c13 Any computer that has this package installed or running should be considered...

Malicious code in json-webhooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 776d1361c31fc0cb7ceb907404e53747cde097dab00614dafac0820111281ad9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5283 Malicious code in masons-chat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14b2f219e65b904ce4942da955e90e752927f635e650295337be7bc2eedfaf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5481 Malicious code in wiki-edit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1ceb97b63413b094efbe0bbad468ef89f1617ca751fb66f51d9ae7c3f94a9c1 Any computer that has this package installed or running should be considered...

Malicious code in jira-agile (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b307068138257dc60d3d453177920dea6a81e6e7fcc8805a80b805ccbce9fb0 Any computer that has this package installed or running should be considered...

MAL-2025-5284 Malicious code in meuhq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a603acb3997e3395851edc9bc2cb0812dff4a2eb9a5f0bf87aa6b5bc229a0097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7602-1: Linux kernel (Xilinx ZynqMP) vulnerabilities

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. CVE-2024-8805 It was discovered that the CIFS network file system...

USN-7595-4: Linux kernel vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. CVE-2025-2312 Several security issues were discovered in the Linux kernel. An...

CVE-2025-34035

An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. The usbinteract.cgi script fails to properly sanitize user input passed to the path parameter, allowing unauthenticated remote attackers to inject arbitrary shell commands. The injected...

USN-7596-2: Linux kernel (Azure, N-Series) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPIO subsystem; - GPU drivers; - InfiniBand drivers; - IRQ chip drivers; - Network drivers; - Mellanox network...

Malicious code in create-one-page-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33e88b813de8bbedaaa44610c78b34cf8ef9b2bd2b7489a8519784f79b7434a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5254 Malicious code in @lebeaujeu/fake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5e562f5743a5e671405871f188aa608700819920005b4d87e84c882b5843d10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discourse-mf (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08376ea7d043c168bc4090d97de1318100b0b2ffb0600a3694a286b5c4b88dea Any computer that has this package installed or running should be considered...

MAL-2025-5484 Malicious code in work_app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81b4979cc69d5d0ba325defd831077b342ddd06fac16258ab3dab1b9fdf31287 Any computer that has this package installed or running should be considered...

Malicious code in ember-htmlbars (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9324ee44a126b3cebe2d74591ab758a4f2f8524833e4a2d6e9564b794b01cec5 Any computer that has this package installed or running should be considered...

MAL-2025-5260 Malicious code in demo-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7efb62b6588eae7ef14f94a8669af77aca640e90b4677dfcddbba8cce6ad547 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...