MAL-2026-7019 Malicious code in npm-rce-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6365312ad1339c7d5539f594b9e472ea3f10401fa356fe49766de887368e87c9 Package declares a postinstall lifecycle script that, on npm install, fetches a script over plain HTTP from a hardcoded bare IP...

CVE-2025-0913

CVE-2025-0913 : The Go standard library change fixes a mismatch in behavior of os.OpenFile with O_CREATE|O_EXCL when the path is a dangling symlink. Previously Unix vs Windows differed; now the operation returns an error if both flags are set and the target is a symlink. This vulnerability is rat...