5956 matches found
MAL-2025-17882 Malicious code in cydashboard-utils (npm)
The package cydashboard-utils was found to contain malicious code...
MAL-2025-38980 Malicious code in web-terminal-utils (npm)
The package web-terminal-utils was found to contain malicious code...
MAL-2025-18622 Malicious code in domino-utils (npm)
The package domino-utils was found to contain malicious code...
MAL-2025-15450 Malicious code in bangscripts-utils (npm)
The package bangscripts-utils was found to contain malicious code...
Malicious code in isv-buc-utils (npm)
The package isv-buc-utils was found to contain malicious code...
MAL-2025-7048 Malicious code in @amber-team/amazon-utils (npm)
The package @amber-team/amazon-utils was found to contain malicious code...
MAL-2025-23456 Malicious code in isv-buc-utils (npm)
The package isv-buc-utils was found to contain malicious code...
Malicious code in mm-scss-utils (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6944 Malicious code in mm-scss-utils (npm)
The package communicates with a domain associated with malicious activity...
Researchers Spot XZ Utils Backdoor in Dozens of Docker Hub Images, Fueling Supply Chain Risks
New research has uncovered Docker images on Docker Hub that contain the infamous XZ Utils backdoor, more than a year after the discovery of the incident. More troubling is the fact that other images have been built on top of these infected base images, effectively propagating the infection furthe...
Malicious code in yandex-money-bank-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e328869c4f8ab6a67a9978769746d5f2112baf3c92882879c8da485d824adc1 The OpenSSF Package Analysis project identified 'yandex-money-bank-utils' @ 8.8.9 npm as malicious. It is considered malicious because: - The...
MAL-2025-6823 Malicious code in yandex-money-bank-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e328869c4f8ab6a67a9978769746d5f2112baf3c92882879c8da485d824adc1 The OpenSSF Package Analysis project identified 'yandex-money-bank-utils' @ 8.8.9 npm as malicious. It is considered malicious because: - The...
USN-7688-1: cifs-utils vulnerabilities
Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly use this issue to escalate privileges. CVE-2020-14342 It was discovered that cifs-utils incorrectly used host credentials when mounting a krb5 CIFS file...
Linux Distros Unpatched Vulnerability : CVE-2025-2312
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong...
Malicious code in xo-angular-ui-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c1ba74b83fb3a51e171948d55aa626342a1477d24f1f0f768f093cba5feef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-6679 Malicious code in xo-angular-ui-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c1ba74b83fb3a51e171948d55aa626342a1477d24f1f0f768f093cba5feef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in stv-utils-frontend (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6658 Malicious code in stv-utils-frontend (npm)
--- -= Per source details. Do not edit below this line.=-...