DLA-4370-1 firefox-esr - security update

Bulletin has no description...

SUSE: Security Advisory (SUSE-SU-2025:4072-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-6056-1 keystone - security update

Bulletin has no description...

AZL-70094 CVE-2025-40194 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: cpufreq: intelpstate: Fix object lifecycle issue in updateqosrequest The cpufreqcpuput call in updateqosrequest takes place too early because the latter subsequently calls freqqosupdaterequest that indirectly accesses the policy...

Malicious code in anais-papmoa-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e960f58705cfb60013b0563c76735ea25ee4e2ffdc2b58d536858489075d4185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139974

Malicious code in nitaaus-1-reff npm...

Malicious code in hokage-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a0695e6f7f07aacd63d02e3ff47eef6788887be242ee04c35cbe197fd2845f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141537

Malicious code in hokage-1 npm...

Malicious code in nitaaus-1-reff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce19f169b8af3c7a43d3288a1cf26bdf65a804a7af2643e12a43e95c65b5b5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178100 Malicious code in polymer-tehh-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8005420f14b73e1818fdd4cc898cca4592448fa7dbfa825030acf466837db330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135011

Malicious code in wulan-1 npm...

EUVD-2025-140436

Malicious code in lia-1 npm...

EUVD-2025-137452

Malicious code in polymer-tehh-1 npm...

MAL-2025-174744 Malicious code in hokage-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a0695e6f7f07aacd63d02e3ff47eef6788887be242ee04c35cbe197fd2845f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141325

Malicious code in ira-1 npm...

Malicious code in riya-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ca4aae9c64caf96ec13c82d772a753a809b2623c75b18f767323b2895c44aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137100

Malicious code in riya-1 npm...

Malicious code in pitra-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d901d0948ec6c43ad27e577f39d3c7a670f34098b490c7e780f8004b9caecfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1330c47176c18ad4e5182afd4708733b1084b1fd0e45fae0b673010cab876c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaasya-1-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4a97c26a657bf603e2001b24371e65355fe5dff7cc101b82e4c390064bfa9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...