Malicious code in wulan-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc70b03bc5bdcc968a51adb9648c84bd5229176b85488ba5dc55b9abb0c95c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165261 Malicious code in ruji-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb9399ae4ef6bf0f59e31d5858e8a121c37a8cfba445b9766fb7e05b54eb0aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152834 Malicious code in aril-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba39cfed92dda0f19d3b006e1e512fb17ea2677161c61ed13120c8f51e10bf22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155591 Malicious code in hafiz-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7871a08a6a1df505fb98299c714036569ce19bde8b3a0d9db735928cd405621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba2ff804f3f496d65b1caa2c1a28a694eb0e1b1dae290d182c26c00115aa9ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159632 Malicious code in manda-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e31098245e475c69d3ac155a5d1340448da21778374cb8c5d09a9cbf5feedf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164305 Malicious code in pitra-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f0d11e4aa9c217d4dfc651c4480ddf25aecc009ba74f91302a21db5e786ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152475 Malicious code in alvira-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ceed1a213f0e85ca4c3d612060494b99514634b633698519b451f26ddd8dbda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-63289

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...

Malicious code in brainy_ladybug_plum-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5dae712d3bf26888aae3c812ca5426c1a35b7eb290a7d8e2524d4ef2bbc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74604

Malicious code in gloriousfroggreen-35 npm...

EUVD-2025-74382

Malicious code in panickygullamethyst-35 npm...

EUVD-2025-74617

Malicious code in gaymolluskmaroon-35 npm...

EUVD-2025-74830

Malicious code in chubbycrawdadlavender-35 npm...

EUVD-2025-74120

Malicious code in unnecessarywildcatcoral-35 npm...

MAL-2025-100189 Malicious code in bumpy_smelt_moccasin-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088acde740866ca042d428c8233aac36306bd5c691954c1374e046dbf81d2154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64114

creationtimestamp| type| source ---|---|--- 2025-11-06 01:35:55+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4wgemusdc42 2025-11-06 03:41:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4wngembiz2q...

Liferay Portal和Liferay DXP 跨站请求伪造漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS, and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DX...

SUSE SLES15 Security Update : kernel (Live Patch 35 for SLE 15 SP4) (SUSE-SU-2025:3712-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3712-1 advisory. This update for the Linux Kernel 5.14.21-15040024147 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilte...

SUSE-SU-2025:3712-1 Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024147 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nftables: reject duplicate device on updates bsc1249534. - CVE-2025-38499: cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns...