Malicious code in hafiz-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03e993367dfe530b2874b5df44687afa445850769c4fe6b4f8bd8787ad9258c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9414a291d0219aa8f0af7821b75b3fd6b4c34fcf41dfe3e393d86d63cc309f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cedefbd86e9e3fc160743282ad792c645b3c5551453755fe03a0bbe74c992e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da866c3e5b78398be6a453e8a175dbb76d394223a64c4fcb8e464e8a863e5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829763e7e386add3da18de20d8120173e35bd93719e2f90c345fcb68c466d84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d5f59f8a652242cfa7b01241f48013f1905c8e7af2824641e2deaf7e857c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156530 Malicious code in intan-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145413e87eb213c1719ef2c0ce3646db1f406538656778d4e95014f39fe5f874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153670 Malicious code in billa-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6881f559ec0d21150806151bf41d27a9f6e624ee0b1b23136f76af606d7351c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2020-22623

creationtimestamp| type| source ---|---|--- 2025-11-11 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m5ezvpmn4e2j...

EUVD-2025-74054

Malicious code in zonalmolluskfuchsia-21 npm...

EUVD-2025-74061

Malicious code in ytterbicanacondared-21 npm...

EUVD-2025-72614

Malicious code in competitiveblackrhinoceros-21-tisubasah npm...

EUVD-2025-44039

A SQL injection vulnerability was found in Looker Studio. A Looker Studio user with report view access could inject malicious SQL that would execute with the report owner's permissions. The vulnerability affected to reports with BigQuery as the data source. This vulnerability was patched on 21 Ju...

CVE-2025-43438

creationtimestamp| type| source ---|---|--- 2025-11-07 21:42:25+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3m532bcoifs2k 2025-11-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1007/...

CVE-2025-36008

creationtimestamp| type| source ---|---|--- 2025-11-07 19:21:58+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52sel3o3do2...

CVE-2025-2534

creationtimestamp| type| source ---|---|--- 2025-11-07 19:21:22+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52sd72t7iu2...

CVE-2025-34245

creationtimestamp| type| source ---|---|--- 2025-11-06 21:05:44+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4yhqjyrxbm2...

CVE-2025-64432

creationtimestamp| type| source ---|---|--- 2025-11-06 19:24:37+00:00| published-proof-of-concept| https://github.com/kubevirt/kubevirt/security/advisories/GHSA-38jw-g2qx-4286 2025-11-07 19:21:44+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52sdsy376e2...

CVE-2025-31954

creationtimestamp| type| source ---|---|--- 2025-11-05 21:49:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4vzqyy5vz2q...

[SECURITY] Fedora 41 Update: ruby-3.3.10-21.fc41

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...