Malicious code in kentung-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c932b29ccb104bce14381444d654edd80efb74f1919d95228a66b24fa87b738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152051 Malicious code in aji-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ffdc19b60ff356ddeb3384b08a6265d124fb9ac65b537df49587cf021d7c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153661 Malicious code in billa-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952247f5fa296dfbb64858d5681bf03ad7796de4e533546c032cf4afa6b97c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74ff3a3fb31f5cf05a334fe301f1dd6f53f997afc69b3330de99d9f7053d431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68cdaeb28b1a2df9e87dfcfb5abdc8ecc681a6fe08bdba529c14a5e06fc3fcc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952247f5fa296dfbb64858d5681bf03ad7796de4e533546c032cf4afa6b97c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155035 Malicious code in fauzi-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e87bb12d91e16c2c77557cd56dc86f174ddf56530b37c810faa327d75d26cb6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156262 Malicious code in ilop-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa471e5a54a351be2f9471640d90aafeb53d317765227fad51573989f840e342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74234

Malicious code in slowmanateejade-13 npm...

EUVD-2025-74815

Malicious code in comfortablepenguinamaranth-13 npm...

EUVD-2025-74505

Malicious code in keyhookwormgold-13 npm...

EUVD-2025-74483

Malicious code in livingchipmunkapricot-13 npm...

Malicious code in living_chipmunk_apricot-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea18e64bb6fbfb5f27282825e2cf539abd7d9436da879aaf6b20cc2e40c329d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64523

creationtimestamp| type| source ---|---|--- 2025-11-11 07:23:02+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-6cqf-cfhv-659g 2025-11-13 01:06:17+00:00| seen|...

EUVD-2025-72004

Malicious code in quokkawhite-13 npm...

Debian: Security Advisory (DSA-6050-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-69973 CVE-2025-64329 affecting package moby-containerd for versions less than 1.6.26-13

containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks. This issue is...

Amazon Linux 2023 : cuda-compat-13-0 (ALAS2023NVIDIA-2025-259)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-259 advisory. NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalatio...

AZL-69878 CVE-2025-11215 affecting package nodejs for versions less than 24.14.1-3

Off by one error in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

AZL-69815 CVE-2024-25621 affecting package moby-containerd-cc for versions less than 1.7.7-13

containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths /var/lib/containerd,...