CVE-2025-24964 Remote Code Execution when accessing a malicious website while Vitest API server is listening

Vitest is a testing framework powered by Vite. Affected versions are subject to arbitrary remote Code Execution when accessing a malicious website while Vitest API server is listening by Cross-site WebSocket hijacking CSWSH attacks. When api option is enabled Vitest UI enables it, Vitest starts a...

CLSA-2025-1738696117 php: Fix of CVE-2024-8929

CVE-2024-8929: fix various heap buffer over-reads for mysqlnd - Modify spec and run-tests.php to fix extension loading during testing...

MAL-2025-1016 Malicious code in apple-tests (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89ff93f95d8e6235296a34bf00a2cf834bcb64673a71326fba527454a5edaf89 Any computer that has this package installed or running should be considered...

Malicious code in apple-tests (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89ff93f95d8e6235296a34bf00a2cf834bcb64673a71326fba527454a5edaf89 Any computer that has this package installed or running should be considered...

Cisco Finds DeepSeek R1 Highly Vulnerable to Harmful Prompts

DeepSeek R1, a cost-efficient AI model, achieves impressive reasoning but fails all safety tests in a new study…...

SUSE-SU-2025:20054-1 Security update for kubevirt

This update for kubevirt fixes the following issues: - Update to version 1.3.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.0 - Fix DV error report via VM printable status - Fix permission error in...

MAL-2025-540 Malicious code in lyft-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 115bad0fa70cde21c6adc84e89cc502d81a28568a9b34867b1fcad432dc49050 The OpenSSF Package Analysis project identified 'lyft-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 115bad0fa70cde21c6adc84e89cc502d81a28568a9b34867b1fcad432dc49050 The OpenSSF Package Analysis project identified 'lyft-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in linkedin-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 190f39385920feb169d7fe6cc41ab7694f2ec357829ed626244c651f4980daf4 The OpenSSF Package Analysis project identified 'linkedin-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-516 Malicious code in linkedin-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 190f39385920feb169d7fe6cc41ab7694f2ec357829ed626244c651f4980daf4 The OpenSSF Package Analysis project identified 'linkedin-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in godaddy-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c19206514a18f90dae516ee3236692ac0674022dc38e842c9a54938c4fad3c0 The OpenSSF Package Analysis project identified 'godaddy-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-474 Malicious code in godaddy-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c19206514a18f90dae516ee3236692ac0674022dc38e842c9a54938c4fad3c0 The OpenSSF Package Analysis project identified 'godaddy-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-452 Malicious code in epicagames-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 656f5ba4ef7edd18950cc43433487b6e25b850dcb513ad10f315b170dd9a771b The OpenSSF Package Analysis project identified 'epicagames-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in epicagames-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 656f5ba4ef7edd18950cc43433487b6e25b850dcb513ad10f315b170dd9a771b The OpenSSF Package Analysis project identified 'epicagames-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b91e399de2020315c4cb5a23b17d10a7d6a0e882e45bb2bb92a92ce4d9b59b3 The OpenSSF Package Analysis project identified 'dropbox-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-438 Malicious code in dropbox-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b91e399de2020315c4cb5a23b17d10a7d6a0e882e45bb2bb92a92ce4d9b59b3 The OpenSSF Package Analysis project identified 'dropbox-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in coinbase-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0741c99359ea17cdde23087b89cf2a7443d9a2b4a7b2d274dbf78d38c71e6d9 The OpenSSF Package Analysis project identified 'coinbase-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-426 Malicious code in coinbase-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0741c99359ea17cdde23087b89cf2a7443d9a2b4a7b2d274dbf78d38c71e6d9 The OpenSSF Package Analysis project identified 'coinbase-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in bookingcom-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f56403aaa0ed1c7153c059cbc6a71669450bef206e1364b7ea6b2b93497e376b The OpenSSF Package Analysis project identified 'bookingcom-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-409 Malicious code in bookingcom-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f56403aaa0ed1c7153c059cbc6a71669450bef206e1364b7ea6b2b93497e376b The OpenSSF Package Analysis project identified 'bookingcom-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...