MAL-2025-66551 Malicious code in tensor-fi-utils-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e019daea1bdfd44c0cf583f38cd83ec5b2073b8b494e8ff91905e0b2f2f88e The package tensor-fi-utils-lib was found to contain malicious code. Source: ghsa-malware...

ALSA-2025:20559 Low: shadow-utils security update

The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user and group accounts. Security Fixes: shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise CVE-2024-56433 For...

Amazon Linux 2 : amazon-efs-utils, --advisory ALAS2-2025-3076 (ALAS-2025-3076)

The version of amazon-efs-utils installed on the remote host is prior to 2.4.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3076 advisory. regex is an implementation of regular expressions for the Rust language. The regex crate features built-in...

Important: amazon-efs-utils

Issue Overview: regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those tunable mitigations already provide sane...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the hostDisk process in the virt-handler component when mounting a host file or directory using the DiskOrCreate option. An attacker can gain unauthorized access to and modify...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the hostDisk process in the virt-handler component when mounting a host file or directory using the DiskOrCreate option. An attacker can gain unauthorized access to and modify...

openSUSE Security Advisory (SUSE-SU-2025:3954-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@kontaa/subgraph (>=1.0.1 <=1.2.3), @kontaa/utils (>=1.2.1 <=1.2.3) +4 more potentially affected by CVE-2025-64430 via parse-server (>=5.6.0 <=6.5.11)

parse-server NPM version =5.6.0, =1.0.1, =1.2.1, =2.4.46, =1.0.0, =1.0.1, =1.0.23 - servable-publishable =1.1.0 Source cves: CVE-2025-64430 Source advisory: SNYK:JS-PARSESERVER-13843716...

SUSE-SU-2025:3954-1 Security update for aws-efs-utils

This update for aws-efs-utils fixes the following issues: Update to version 2.3.3 bsc1240044. Security issues fixed: - CVE-2025-55159: slab: incorrect bounds check in getdisjointmut function can lead to potential crash due to out-of-bounds access bsc1248055. - CVE-2020-35881: traitobject: log4rs:...

[SECURITY] Fedora 42 Update: rust-proc-macro-utils-0.10.0-1.fc42

Low-level utilities on proc-macro and proc-macro2 types...

Malicious Package

Overview ofjaaaah-helper-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

coreboot-utils-25.09-2.1 on GA media (moderate)

coreboot-utils-25.09-2.1 on GA media Announcement ID: openSUSE-SU-2025:15675-1 Rating: moderate Cross-References: CVE-2025-62813 CVSS scores: CVE-2025-62813 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2025-62813 SUSE : 6.8...

EUVD-2025-37296

Malicious code in ecto-utils npm...

Malicious code in spectral-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b1d60d661e6371af32c270f14fcb010fbb6dbebca0f1ecdf268ec1c048a957 The package spectral-utils was found to contain malicious code...

EUVD-2025-37291

Malicious code in spectral-utils npm...

MAL-2025-49296 Malicious code in ecto-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce81e1cdd6102c7565db6c5e0e23b7776c666391fcaf74dd0dda3d9abc4a001f The package ecto-utils was found to contain malicious code...

Malicious code in epic-webpack-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff282c7ec2d975de64a2b6ff7db19e8cb5b4ab31b1b39d857b7bb9d2f07c8a6 The package epic-webpack-utils was found to contain malicious code...

Malicious code in epic-dynamo-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dfc024cfa20f34e12e97a7d6ec0f046f02a0d692889a85cd69ef4aca80673c The package epic-dynamo-utils was found to contain malicious code...

Malicious code in epic-react-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b754cb5a234d92fe76a481880c57c66b79992d80ef094a44a8e53c2b6f143edf The package epic-react-test-utils was found to contain malicious code...

Malicious code in epic-env-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f94098f216650c7955adfe4a82c23f4368b9cae20abff8da12aa162e4a8e8b4 The package epic-env-utils was found to contain malicious code...