Malicious code in react-native-log-level (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d9b4b32f8ecb8d86fe3786c14e216538d2d25e1e3257627f186495dedaf9b1 The package react-native-log-level was found to contain malicious code. Source: ghsa-malware...

Malicious code in jacob-zuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5046cda17d3d1de49e402cc9dbb860de629a5843d6ad27d2db95f626a280408 The package jacob-zuma was found to contain malicious code. Source: ghsa-malware 0aae0c8157adb8caf2d0af0aab7f402560e4489ff1f7f8b615bb7f79a23b3c1e Any...

MAL-2025-190974 Malicious code in jacob-zuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5046cda17d3d1de49e402cc9dbb860de629a5843d6ad27d2db95f626a280408 The package jacob-zuma was found to contain malicious code. Source: ghsa-malware 0aae0c8157adb8caf2d0af0aab7f402560e4489ff1f7f8b615bb7f79a23b3c1e Any...

Malicious code in invo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e4a40c8b32a7c38f435045392647f8c5024b472cd396c5d370f6f90eb37848 The package invo was found to contain malicious code. Source: ghsa-malware 26188e61833b5e2bbf47803695cd609aa04a940cd68950202e5908815871f09f Any...

MAL-2025-190966 Malicious code in httpness (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a5f77281deaacd07a99bc027837e6209d439745da0eefd97cf0004830460ea The package httpness was found to contain malicious code. Source: ghsa-malware 3248b6d087323d2da2b969624ae57df331a2fa8f91c973eadd8352ae4116424e Any...

Malicious code in hover-design-prototype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db96c13324b014e92e639e93401c356c60bdd7d020bc22c5327900ccbab0220a The package hover-design-prototype was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190962 Malicious code in haufe-axera-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49957e5f8983a7e16bd6d6377b03e200addbb6bd6dcd834f6370b5fa5f77061 The package haufe-axera-api-client was found to contain malicious code. Source: ghsa-malware...

Malicious code in dashboard-empty-state (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00545cf1acf95f278f2b1fca78d8c3df406a74600585630c0ff6c6c526b53b4 The package dashboard-empty-state was found to contain malicious code. Source: ghsa-malware...

Malicious code in compare-obj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1892ab55a1dcdd44c7f030aef1ae76a865ffffe4b7a0d4a0492696c149db2e4d The package compare-obj was found to contain malicious code. Source: ghsa-malware 3a7310cc13d858af4c2dfc25ec5d42cf6aa52b00dd7fc28ba0ee069a68e7551b An...

Malicious code in sort-by-distance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e18da0b56bd15f23c5f0d3dcb5a2f08b07ee8e495d121029cbeebaf023ce50f The package sort-by-distance was found to contain malicious code. Source: ghsa-malware b5f4152194e53195be1b2e405488269c046c584acfa9cc1f828115c2a1b0b7...

Malicious code in south-african-id-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e086352ee820c350aadcfbcb3d69f34586e6a94ec2237005a12cf89a4b6091ba The package south-african-id-info was found to contain malicious code. Source: ghsa-malware...

Malicious code in stat-fns (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5395e07a1f1a743d77d42495c7eaf08cb0ced22a0b0883b53b5adf78beef28a The package stat-fns was found to contain malicious code. Source: ghsa-malware 6c2e197e85b015babcf3a2073e3f76b980a3ae924a49a20d9c1648c610d7d3c0 Any...

Malicious code in stoor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7b7532a301c81deec9ab17a09d1b99034890bb7c52da539cebf9959e067d00b The package stoor was found to contain malicious code. Source: ghsa-malware be82c913cadb695dde12c8181a4caebf5a0ab0fedc2040c8a874418051174e67 Any...

Malicious code in svelte-toasty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd148faed79826bf40f8bee2ac4f3aee5c75ec85e9ca81d1a9ed972db4a17a26 The package svelte-toasty was found to contain malicious code. Source: ghsa-malware 33e60836cd791de23038b867cd4e97fb21298208fc87c6b2096fe0e189d3fc86...

Malicious code in template-micro-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a11182cb9c66d55101737e1db16a1baf528ddd4f3a498c74acfc75da64fd92b5 The package template-micro-service was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191023 Malicious code in tenacious-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61051d9fdf4393e5d5b5336a35ce010a5bd613ab5e8c9b1f45c9c3a409f365c5 The package tenacious-fetch was found to contain malicious code. Source: ghsa-malware 0c44fc9d1c7099876e590cd69eb0d5ff3928dcc439cfe74cce255584a3455cf...

MAL-2025-190940 Malicious code in url-encode-decode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ce07aaa237eff3cc95c7bb560f4096191d2d5328de45f176f3f8662ca7cd34 The package url-encode-decode was found to contain malicious code. Source: ghsa-malware...

Malicious code in wellness-expert-ng-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba93ea812053d1ede65994da95ddd6a39a75002e9ec11387d69ca38f99980fb3 The package wellness-expert-ng-gallery was found to contain malicious code. Source: ghsa-malware...

USN-7887-1: Linux kernel (Raspberry Pi Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

CVE-2025-40213

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: fix crash in setmeshsync and setmeshcomplete There is a BUG: KASAN: stack-out-of-bounds in setmeshsync due to memcpy from badly declared on-stack flexible array. Another crash is in setmeshcomplete due to double...