MAL-2025-28897 Malicious code in passmark-worker (npm)

The package passmark-worker was found to contain malicious code...

MAL-2025-24800 Malicious code in kue-worker (npm)

The package kue-worker was found to contain malicious code...

MAL-2025-39452 Malicious code in worker-common (npm)

The package worker-common was found to contain malicious code...

MAL-2025-24763 Malicious code in kosmio-worker (npm)

The package kosmio-worker was found to contain malicious code...

MAL-2025-38981 Malicious code in web-worker-swc-plugin (npm)

The package web-worker-swc-plugin was found to contain malicious code...

Malicious code in logrocket-core-worker (npm)

The package logrocket-core-worker was found to contain malicious code...

Malicious code in kosmio-worker (npm)

The package kosmio-worker was found to contain malicious code...

Malicious code in web-worker-swc-plugin (npm)

The package web-worker-swc-plugin was found to contain malicious code...

Malicious code in kue-worker (npm)

The package kue-worker was found to contain malicious code...

Malicious code in passmark-worker (npm)

The package passmark-worker was found to contain malicious code...

Malicious code in worker-common (npm)

The package worker-common was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2020-26976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request...

Linux Distros Unpatched Vulnerability : CVE-2023-23602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to...

Linux Distros Unpatched Vulnerability : CVE-2020-12387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. This...

CVE-2025-7205

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the donor notes parameter in all versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

Malicious Package

Overview indexer-worker-service is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

drupwn

This is an offensive tool for Drupal enumeration and exploitation. The tool, named Drupwn, is designed to automate Drupal information gathering and exploitation. It can be run in two modes: enum and exploit. The enum mode allows performing enumerations, while the exploit mode allows checking and...

CVE-2025-38358

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between async reclaim worker and closectree Syzbot reported an assertion failure due to an attempt to add a delayed iput after we have set BTRFSFSSTATENODELAYEDIPUT in the fsinfo state: WARNING: CPU: 0 PID: 65 at...

CVE-2025-38358 btrfs: fix race between async reclaim worker and close_ctree()

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between async reclaim worker and closectree Syzbot reported an assertion failure due to an attempt to add a delayed iput after we have set BTRFSFSSTATENODELAYEDIPUT in the fsinfo state: WARNING: CPU: 0 PID: 65 at...

CLSA-2025-1753207126 nginx: Fix of 2 CVEs

CVE-2022-41741: fix vulnerability in ngxhttpmp4module leading to potential memory corruption and termination by improving module handling of specially crafted audio/video files - CVE-2022-41742: fix module ngxhttpmp4module vulnerability to prevent worker process crash and memory disclosure from...