Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code and was identified as part of the PolinRider supply chain campaign, linked to North Korean threat actors associated with the Contagious Interview/Famous Chollima activity...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code and was identified as part of the PolinRider supply chain campaign, linked to North Korean threat actors associated with the Contagious Interview/Famous Chollima activity...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code and was identified as part of the PolinRider supply chain campaign, linked to North Korean threat actors associated with the Contagious Interview/Famous Chollima activity...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code and was identified as part of the PolinRider supply chain campaign, linked to North Korean threat actors associated with the Contagious Interview/Famous Chollima activity...

GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites

The malware known as GootLoader has resurfaced yet again after a brief spike in activity earlier this March, according to new findings from Huntress. The cybersecurity company said it observed three GootLoader infections since October 27, 2025, out of which two resulted in hands-on keyboard...

Malicious code in node-woff2 (npm)

The package node-woff2 was found to contain malicious code...

MAL-2025-27664 Malicious code in node-woff2 (npm)

The package node-woff2 was found to contain malicious code...

woff2:convert_woff2ttf_fuzzer_new_entry: Use-of-uninitialized-value in woff2::WOFF2StringOut::Write

Project: https://github.com/google/woff2.git Detailed Report: https://oss-fuzz.com/testcase?key=5886659764748288 Project: woff2 Fuzzing Engine: libFuzzer Fuzz Target: convertwoff2ttffuzzernewentry Job Type: libfuzzermsanwoff2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

woff2:convert_woff2ttf_fuzzer_new_entry: Use-of-uninitialized-value in convert_woff2ttf_fuzzer_new_entry.cc

Project: https://github.com/google/woff2.git Detailed Report: https://oss-fuzz.com/testcase?key=4701552385261568 Project: woff2 Fuzzing Engine: libFuzzer Fuzz Target: convertwoff2ttffuzzernewentry Job Type: libfuzzermsanwoff2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

woff2:convert_woff2ttf_fuzzer_new_entry: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4684628745060352 Project: woff2 Fuzzing Engine: libFuzzer Fuzz Target: convertwoff2ttffuzzernewentry Job Type: libfuzzerasanwoff2 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Cras...

woff2 bug fix and enhancement update

An update is available for woff2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.1...

new packages: woff2

An update is available for woff2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

woff2:convert_woff2ttf_fuzzer_new_entry: Use-of-uninitialized-value in woff2::WOFF2StringOut::Write

Project: https://github.com/google/woff2.git Detailed Report: https://oss-fuzz.com/testcase?key=6464887392436224 Project: woff2 Fuzzing Engine: libFuzzer Fuzz Target: convertwoff2ttffuzzernewentry Job Type: libfuzzermsanwoff2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

woff2:convert_woff2ttf_fuzzer: Dynamic-stack-buffer-overflow in void std::__1::sort<woff2::Table>

Project: https://github.com/google/woff2.git Detailed Report: https://oss-fuzz.com/testcase?key=4559549892788224 Project: woff2 Fuzzing Engine: afl Fuzz Target: convertwoff2ttffuzzer Job Type: aflasanwoff2 Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 8 Crash Address:...