Mozilla Firefox ESR < 17.0.5

The version of Firefox ESR installed on the remote Windows host is prior to 17.0.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-40 advisory. - CERTDecodeCertPackage reads bytes outside the input bufferCVE-2013-0791 CVE-2013-0791 Note that Nessus has not tested for...

Mozilla Thunderbird < 17.0.5

The version of Thunderbird installed on the remote Windows host is prior to 17.0.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-40 advisory. - CERTDecodeCertPackage reads bytes outside the input bufferCVE-2013-0791 CVE-2013-0791 Note that Nessus has not tested for...

OPENSUSE-SU-2025:20159-1 Security update for keylime

This update for keylime fixes the following issues: Update to version 7.13.0+40. Security issues fixed: - CVE-2025-13609: possible agent identity takeover due to registrar allowing the registration of agents with duplicate UUIDs bsc1254199. - CVE-2025-1057: registrar denial-of-service due to...

CVE-2025-14327

creationtimestamp| type| source ---|---|--- 2025-12-10 13:40:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m7n6poeiyu2p 2025-12-11 15:25:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m7puzz3ea222 2026-01-13 15:07:45+00:00| seen|...

GHSA-GWF3-8GM3-QRMJ

creationtimestamp| type| source ---|---|--- 2025-11-21 18:40:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115589147730637509...

Malicious code in alvino-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1410a8a98d25535da896ed21562b0a225a5de0d6571fc5c66f21493eced9be2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00757010b030278ccf82174c83e8d774c8825a494fb7cb4f15abdb5e16d2cd36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140401

Malicious code in lia-40 npm...

MAL-2025-178322 Malicious code in riya-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf86d73b336741055705983a06dbbcc4c98bf649734a6b9815818b6de41cc1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174778 Malicious code in hokage-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2ad5a07130a5849dc61fb44b622cca08906e38909fef57b9fede2c3aa602a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d274c8e67d49031e9a58fcccd6adb5ec3995e8e87a36a67fb9bd1e89d55958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141290

Malicious code in ira-40 npm...

EUVD-2025-141500

Malicious code in hokage-40 npm...

EUVD-2025-137032

Malicious code in riya-40 npm...

EUVD-2025-143514

Malicious code in alvino-40 npm...

Malicious code in icha-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d8ca40dfd69f18bdda83d35d49c44802817e8c5a80e87511d4568725621515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3189d13ad2bfd58d57dd094e5663c6fbd6c51d565cc8821b30c493e32de127b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1640dd5d007752f05c3b1cec429c092137ecf81811f23643867d119f2b51b181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64d6bff226bb8a8cc1a4f7de9f0dc98224c1bf95dd33425713aba069664551c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7746a0de99b7352bd68d9965ec846e1a092681252177e492559b9f6dd3c37a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...