Malicious code in epic-service-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84d47c1d44b830a1f09c3748941c2e88012f6b23eaed2a7e0cb1b8cd4f39f18 The package epic-service-worker was found to contain malicious code...

MAL-2025-49239 Malicious code in store-service-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96644928dc5cfc92d966ad6cbd2a16820b0ad6951971e35c226f31e2e594f687 The package store-service-worker was found to contain malicious code...

MAL-2025-49191 Malicious code in epic-service-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84d47c1d44b830a1f09c3748941c2e88012f6b23eaed2a7e0cb1b8cd4f39f18 The package epic-service-worker was found to contain malicious code...

MAL-2025-49116 Malicious code in epic-analytics-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 001f66bdd59090dfeb452f1f9050ac62587a91713d8d4c2a7a3ec06a5e45abb7 The package epic-analytics-worker was found to contain malicious code...

CVE-2025-54941: Improper Neutralization of Special Elements used in an OS Command

An example dag exampledagdecorator had non-validated parameter that allowed the UI user to redirect the example to a malicious server and execute code on worker. This however required that the example dags are enabled in production not default or the example dag code copied to build your own...

PT-2025-44367

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 3.0.5 Description A parameter in the example dag decorator dag was not properly validated, potentially allowing a user of the Airflow UI to redirect the example to a malicious server and execute code on a worke...

EUVD-2025-35776

Malicious code in create-artifact-worker npm...

EUVD-2025-35771

Malicious code in generate-delta-worker npm...

Malicious code in generate-delta-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad06efd44d16d4917dd43ae0c9464faaffb8c5f2db9f3b8b3a94a36de4722ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in create-artifact-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17addb465b6ed297d01361f4bf1b6b46f5eb2917622ac0f7b577dae8e7c29cae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview generate-delta-worker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48565 Malicious code in generate-delta-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad06efd44d16d4917dd43ae0c9464faaffb8c5f2db9f3b8b3a94a36de4722ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48560 Malicious code in create-artifact-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17addb465b6ed297d01361f4bf1b6b46f5eb2917622ac0f7b577dae8e7c29cae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2023-60015

In the Linux kernel, the following vulnerability has been resolved: arm64: sme: Use STR P to clear FFR context field in streaming SVE mode The FFR is a predicate register which can vary between 16 and 256 bits in size depending upon the configured vector length. When saving the SVE state in...

workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker

...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987564)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987564 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix hang during unmount when stopping a space reclaim worker Often when running generic/5...

JLSEC-2025-123 `libavcodec/pthread_frame.c` in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale...

libavcodec/pthreadframe.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances e.g., hardware re-initialization upon a mid-video SPS change when...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF when processing user-supplied URLs. An attacker can cause the server to send unauthorized requests to arbitrary internal or external services by submitting crafted URLs. Workaround This vulnerability can...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF when processing user-supplied URLs. An attacker can cause the server to send unauthorized requests to arbitrary internal or external services by submitting crafted URLs. Workaround This vulnerability can...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF when processing user-supplied URLs. An attacker can cause the server to send unauthorized requests to arbitrary internal or external services by submitting crafted URLs. Workaround This vulnerability can...