CVE-2025-65955

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagick’s Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family calls...

GHSA-G77Q-XRWW-P834

creationtimestamp| type| source ---|---|--- 2025-12-02 22:34:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115652353149773254...

Number withdrawal

ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert, or write images in a variety of formats. A resource management error vulnerability exists in ImageMagick versions prior to 7.1.2-9 and prior to 6.9.13-34, which stems from the reuse...

SUSE SLES15 Security Update : kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2025:4215-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4215-1 advisory. This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.144 fixes various security issues The following security issues were fixed: ...

CVE-2025-13248

creationtimestamp| type| source ---|---|--- 2025-11-16 15:14:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5qys4tfvu2a...

EUVD-2025-141297

Malicious code in ira-34 npm...

Malicious code in alvino-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a12f3e2cfa6cce55b46c1fc1bc28fc18f214a8d2cb59d7636986132f0891e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172783 Malicious code in alvino-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a12f3e2cfa6cce55b46c1fc1bc28fc18f214a8d2cb59d7636986132f0891e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140408

Malicious code in lia-34 npm...

Malicious code in ira-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07d12c359842dfac1a3d4fca3922ab0315b09b0bb686123da3bd0debf5b4b5b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143520

Malicious code in alvino-34 npm...

MAL-2025-174771 Malicious code in hokage-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29f3f765e01e504250765dd4ebdbbb2905a5f988e497cc5fda8a57b7c0288cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141509

Malicious code in hokage-34 npm...

Malicious code in ilop-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 560c594c6f3cd0ef64c81d24fa213f21db28ade0f7696967d595a5886d2b363f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53c53bcf045efcc92da7db57ee5750763daea4e7320b72a5458843d8e3448b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae48c9ad2ac31940a203fc9d2233aad216ab9f444f72e2cefd1596ef7b1d5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146253

Malicious code in wulan-34 npm...

Malicious code in kentung-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d81e763987a1c14a85f43018ba91d69f1547f6b86d866d188395246339c697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160819 Malicious code in muklis-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03aa6f97743cc3c60b21217f051d917f7198094c9e1cb3bd677c679eefa4e14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159631 Malicious code in manda-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53c53bcf045efcc92da7db57ee5750763daea4e7320b72a5458843d8e3448b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...