4732 matches found
Researchers Spot XZ Utils Backdoor in Dozens of Docker Hub Images, Fueling Supply Chain Risks
New research has uncovered Docker images on Docker Hub that contain the infamous XZ Utils backdoor, more than a year after the discovery of the incident. More troubling is the fact that other images have been built on top of these infected base images, effectively propagating the infection furthe...
Malicious code in yandex-money-bank-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e328869c4f8ab6a67a9978769746d5f2112baf3c92882879c8da485d824adc1 The OpenSSF Package Analysis project identified 'yandex-money-bank-utils' @ 8.8.9 npm as malicious. It is considered malicious because: - The...
MAL-2025-6823 Malicious code in yandex-money-bank-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e328869c4f8ab6a67a9978769746d5f2112baf3c92882879c8da485d824adc1 The OpenSSF Package Analysis project identified 'yandex-money-bank-utils' @ 8.8.9 npm as malicious. It is considered malicious because: - The...
USN-7688-1: cifs-utils vulnerabilities
Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly use this issue to escalate privileges. CVE-2020-14342 It was discovered that cifs-utils incorrectly used host credentials when mounting a krb5 CIFS file...
Linux Distros Unpatched Vulnerability : CVE-2025-2312
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong...
Malicious code in xo-angular-ui-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c1ba74b83fb3a51e171948d55aa626342a1477d24f1f0f768f093cba5feef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-6679 Malicious code in xo-angular-ui-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c1ba74b83fb3a51e171948d55aa626342a1477d24f1f0f768f093cba5feef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in stv-utils-frontend (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6658 Malicious code in stv-utils-frontend (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6642 Malicious code in nodemailer-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6616 Malicious code in wallets-utils (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in utils-wallet (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6612 Malicious code in utils-wallet (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6467 Malicious code in boto3-batch-utils (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6759 Malicious code in sentry-utils (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in nova-ssr-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6744 Malicious code in nova-ssr-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6743 Malicious code in nova-node-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in nova-node-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in gafana-test-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a4e648e988f33de6b085bf631d45494adb7b9be241071b454c40705384ad7e6e The OpenSSF Package Analysis project identified 'gafana-test-utils' @...