MAL-2025-22810 Malicious code in hw-angular-validator (npm)

The package hw-angular-validator was found to contain malicious code...

Malicious code in content-cloud-validator-tool (npm)

The package content-cloud-validator-tool was found to contain malicious code...

Malicious code in k8s-template-validator (npm)

The package k8s-template-validator was found to contain malicious code...

MAL-2025-16887 Malicious code in checksum-validator (npm)

The package checksum-validator was found to contain malicious code...

Malicious code in uintbn-validator (npm)

The package uintbn-validator was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-9328 Malicious code in @siteaudit/amp-validator-api (npm)

The package @siteaudit/amp-validator-api was found to contain malicious code...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: elvish, nvidia-nsight-compute-13.0, cortex-fips, prometheus-elasticsearch-exporter, redpanda, rancher-agent, cloudnative-pg-fips, kubernetes-csi-external-provisioner-fips, cilium-envoy-fips, velero, packer, prometheus, boring-registry, prometheus-podman-exporter,...

Linux Distros Unpatched Vulnerability : CVE-2025-35036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user- supplied input in a constraint violation message with...

PT-2025-31961 · Undefined · Undefined

@Lemondator Can you provide the provenance for CVE-2025-22987 please?...

GO-2025-3801 Babylon vulnerable to chain halt when a message modifies the validator set at the epoch boundary in github.com/babylonlabs-io/babylon

Babylon vulnerable to chain halt when a message modifies the validator set at the epoch boundary in github.com/babylonlabs-io/babylon...

GO-2025-3803 Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk

Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk...

Malware in splice-pulumi-common-validator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in splice-pulumi-common-validator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14575bc2da7a355de468310839aa06cea1b89f21b60553520aacc0b5cd693ef Any computer that has this package installed or running should be considered...

MAL-2025-6128 Malicious code in splice-pulumi-common-validator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14575bc2da7a355de468310839aa06cea1b89f21b60553520aacc0b5cd693ef Any computer that has this package installed or running should be considered...

Malicious code in sha256-validator-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 453f997676ddfb37b97659a39bdc5de8d8c2fc1b070f5feeda72545030850113 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in sha256-validator-pack

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in eth-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7abd5491d54b588d04ced891539747a0d295877ddfcba02d67fa05ff8953d60b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in eth-validator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in sol-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f54238c3d0c543a0c99cd8dbe4ffee1a2ffe0ca8230dbd0c7a8f521259f38339 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5998 Malicious code in eth-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7abd5491d54b588d04ced891539747a0d295877ddfcba02d67fa05ff8953d60b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...