EUVD-2025-34521

Malicious code in deficonnect-internal-utils npm...

MAL-2025-48421 Malicious code in deficonnect-internal-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6f3098a58343ae74219c429df56aab7d01b71a39b84a9165b0ee3679a6964f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-46637

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ASoC amd/sdw utils component where a NULL pointer dereference may occur if devm kasprintf fails during memory allocation. Specifically, a debu...

Malicious code in internal-greeter-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aba71c91c57a929f6d02d2775a1e431ee72be5d4e13215c18875202086b0c4e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48409 Malicious code in internal-greeter-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aba71c91c57a929f6d02d2775a1e431ee72be5d4e13215c18875202086b0c4e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OESA-2025-2376 cjson security update

cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file. %package devel Summary: Development files for cJSON Requires: = - %description devel The cjson-devel package contains libraries and header files for developing...

bastion-key-client (>=1.0.1, <=1.4.0), fabric-am-handlers (>=0.11.0, <=1.4.0b2) +5 more potentially affected by CVE-2025-62706 via authlib (0.15.2)

authlib PYPI version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - bastion-key-client =1.0.1, =0.11.0, =0.14.0, =0.4.0, =0.9.0, =1.0.0b1, =1.0.0 Source cves: CVE-2025-62706 Source advisory: OSV:GHSA-G7F3-828F-7H7...

aad-fastapi-dl37 (>=1.0.0, <=1.0.2), agentstack-cli (>=0.4.0rc1, <=0.4.3) +160 more potentially affected by CVE-2025-62706 via authlib (>=1.0.0b2, <=1.6.4)

authlib PYPI version =1.0.0b2, =1.0.0, =0.4.0rc1, =0.1.0, =1.3.0a20250904, =1.2.0a20250730, =1.2.0a20250730, =0.0.0, =1.7.0, =0.0.1, =0.1.0, =1.0.3, =2.0.0, =0.16.0, =0.33.0, =0.43.0 and more Source cves: CVE-2025-62706 Source advisory: GHSA-G7F3-828F-7H7M...

aad-fastapi-dl37 (>=1.0.0, <=1.0.2), agentstack-cli (>=0.4.0rc1, <=0.4.3) +160 more potentially affected by CVE-2025-62706 via authlib (>=1.0.0b2, <=1.6.4)

authlib PYPI version =1.0.0b2, =1.0.0, =0.4.0rc1, =0.1.0, =1.3.0a20250904, =1.2.0a20250730, =1.2.0a20250730, =0.0.0, =1.7.0, =0.0.1, =0.1.0, =1.0.3, =2.0.0, =0.16.0, =0.33.0, =0.43.0 and more Source cves: CVE-2025-62706 Source advisory: OSV:GHSA-G7F3-828F-7H7M...

bastion-key-client (>=1.0.1, <=1.4.0), fabric-am-handlers (>=0.11.0, <=1.4.0b2) +5 more potentially affected by CVE-2025-61920 via authlib (0.15.2)

authlib PYPI version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - bastion-key-client =1.0.1, =0.11.0, =0.14.0, =0.4.0, =0.9.0, =1.0.0b1, =1.0.0 Source cves: CVE-2025-61920 Source advisory: OSV:GHSA-PQ5P-34CR-23V...

Malicious code in sp-web-utils-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18030241ea8f0cd79b1c6d323dfb7f1de0ede76c967166f73fcf51108f2ecc52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview dt-frontend-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48287 Malicious code in sp-web-utils-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18030241ea8f0cd79b1c6d323dfb7f1de0ede76c967166f73fcf51108f2ecc52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview sp-web-utils-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in dt-frontend-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d84c9e90fa62a28e4b2b22f78ffa732463fd6351f426e71f105661f00179e4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48277 Malicious code in dt-frontend-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d84c9e90fa62a28e4b2b22f78ffa732463fd6351f426e71f105661f00179e4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-33612

Malicious code in dt-frontend-utils npm...

Malicious Package

Overview chai-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2025-48242 Malicious code in chai-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 975b6ac20ebe483ebacc5aac930cd8efb123c6f3e9c68d18bf72c0e42c1787ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in v0-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...