6582 matches found
MAL-2025-19107 Malicious code in ebos_lambda_utils (npm)
The package eboslambdautils was found to contain malicious code...
MAL-2025-14873 Malicious code in arthur-utils (npm)
The package arthur-utils was found to contain malicious code...
MAL-2025-40440 Malicious code in yelp-biz-perf-utils (npm)
The package yelp-biz-perf-utils was found to contain malicious code...
MAL-2025-15450 Malicious code in bangscripts-utils (npm)
The package bangscripts-utils was found to contain malicious code...
MAL-2025-7976 Malicious code in @frozen-ui/testing-utils (npm)
The package @frozen-ui/testing-utils was found to contain malicious code...
MAL-2025-33043 Malicious code in sh-utils (npm)
The package sh-utils was found to contain malicious code...
Malicious code in mm-scss-utils (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6944 Malicious code in mm-scss-utils (npm)
The package communicates with a domain associated with malicious activity...
Researchers Spot XZ Utils Backdoor in Dozens of Docker Hub Images, Fueling Supply Chain Risks
New research has uncovered Docker images on Docker Hub that contain the infamous XZ Utils backdoor, more than a year after the discovery of the incident. More troubling is the fact that other images have been built on top of these infected base images, effectively propagating the infection furthe...
Malicious code in yandex-money-bank-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e328869c4f8ab6a67a9978769746d5f2112baf3c92882879c8da485d824adc1 The OpenSSF Package Analysis project identified 'yandex-money-bank-utils' @ 8.8.9 npm as malicious. It is considered malicious because: - The...
MAL-2025-6823 Malicious code in yandex-money-bank-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e328869c4f8ab6a67a9978769746d5f2112baf3c92882879c8da485d824adc1 The OpenSSF Package Analysis project identified 'yandex-money-bank-utils' @ 8.8.9 npm as malicious. It is considered malicious because: - The...
USN-7688-1: cifs-utils vulnerabilities
Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly use this issue to escalate privileges. CVE-2020-14342 It was discovered that cifs-utils incorrectly used host credentials when mounting a krb5 CIFS file...
Linux Distros Unpatched Vulnerability : CVE-2025-2312
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong...
Malicious code in xo-angular-ui-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c1ba74b83fb3a51e171948d55aa626342a1477d24f1f0f768f093cba5feef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-6679 Malicious code in xo-angular-ui-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c1ba74b83fb3a51e171948d55aa626342a1477d24f1f0f768f093cba5feef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-6658 Malicious code in stv-utils-frontend (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in stv-utils-frontend (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6642 Malicious code in nodemailer-utils (npm)
--- -= Per source details. Do not edit below this line.=-...