Malicious code in @trigo/keycloak-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c444dc1ce66be4f196ec79b9db852b3c8c3bcf029738b61e4471c034c96fe0 The package @trigo/keycloak-api was found to contain malicious code. Source: ghsa-malware...

Malicious code in @posthog/rrdom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58f6a4822c61ea47436ea08eeb6ab0f8083fd7fed7ea3c2c42a832ab84a57ba The package @posthog/rrdom was found to contain malicious code. Source: ghsa-malware 6ad32d1af00f220489835e70f37db33a18034db715e2b750dc95639ba7e05d75...

Malicious code in atrix-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc27b71b0a6bedd292b899cd2cafaae36c887c103fbebc76f31189538787ffc The package atrix-mongoose was found to contain malicious code. Source: ghsa-malware a7b1ca5c62f87d30469e55f9e277026bdbedad7e3060cea2e2a80f20a87dc438...

MAL-2025-190663 Malicious code in @asyncapi/optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886928a124b656faf40d1490a3b484cf0aa717d98fa9f5cd6de025e1874183e5 The package @asyncapi/optimizer was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190665 Malicious code in @ensdomains/address-encoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec8264ecb2af0b5028f08af1a108f7fe73cd1cbe55ea2cb7102a3e28b2e1052e The package @ensdomains/address-encoder was found to contain malicious code. Source: ghsa-malware...

Malicious code in @posthog/ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9a022b20b3025cb0846139ab6f2a1308025ed8ee902db18aacbfa95c6ea7e6 The package @posthog/ai was found to contain malicious code. Source: ghsa-malware 1e6a08419969270cca059f804bb3ec25aa0427f00ef555a9409c12d50921a83c An...

Malicious code in @asyncapi/generator (npm)

@asyncapi/generator version 3.3.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is appended to a...

Malicious code in @asyncapi/react-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ebe88915a6eee986912a6566783764ff832588763eaa7b763710ed9f992299 The package @asyncapi/react-component was found to contain malicious code. Source: ghsa-malware...

GHSA-6QV9-48XG-FC7F vulnerabilities

Vulnerabilities for packages: open-webui...

MAL-2025-190632 Malicious code in tailwind-pulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994e15b9c34fb68a81553df4c2a51b9412bbcc3543da29a73b6f087507c9ea4c The package tailwind-pulse was found to contain malicious code. Source: ghsa-malware ca854515da8a9c174658ca39afad56810ab87adcaa9eff2fca5043dbd8f50d04...

Malicious code in shinhan-limit-scrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae6aee79d5386d3525290fdc37160052ab2cfc88cfe444751cf1e0c09122b48 The package shinhan-limit-scrap was found to contain malicious code. Source: ghsa-malware...

Linux Distros Unpatched Vulnerability : CVE-2025-29934

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulting in loss of data...

ROS-20251124-02

Vulnerability of the software tool for implementing network routing on Unix-like systems FRRouting is related to insufficient validation of OSPF LSA packets in the ospfteparsete function in ospfd/ospfte.c. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial...

Linux Distros Unpatched Vulnerability : CVE-2025-0033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentially resulting in a lo...

CVE-2025-64756 vulnerabilities

Vulnerabilities for packages: saf, node-gyp, lerna, ts-patch, npm, pulumi, py3-jupyterlab, prism...

SUSE CVE-2025-9820

A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the applicatio...

Linux Distros Unpatched Vulnerability : CVE-2025-11933

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Input Validation in the TLS 1.3 CKS extension parsing in wolfSSL 5.8.2 and earlier on multiple platforms allows a remote unauthenticated attacker to...

wolfSSL 安全漏洞

wolfSSL CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from wolfSSL, Inc. in the United States. A security vulnerability exists in wolfSSL that stems from the fact that any weaker digest algorithm can be used by the client when connecting using...

Linux Distros Unpatched Vulnerability : CVE-2025-12889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - With TLS 1.2 connections a client can use any digest, specifically a weaker digest that is supported, rather than those in the CertificateRequest. CVE-2025-1288...

CVE-2025-43374

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.5, visionOS 2.5, watchOS 11.5. An attacker in physical proximity may be able to cause an...