Mageia: Security Advisory (MGASA-2025-0299)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2025-0282)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RockyLinux 9 : xorg-x11-server (RLSA-2025:20961)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:20961 advisory. xorg: xmayland: Use-after-free in XPresentNotify structure creation CVE-2025-62229 xorg: xwayland: Use-after-free in Xkb client resource removal...

EUVD-2025-141485

Malicious code in hokage-9 npm...

EUVD-2025-141275

Malicious code in ira-9 npm...

Malicious code in hokage-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8b516add86b47757da06733d478b85ac6f419cf957956a051c8dc4ebd5e6fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0f99206a2ed5a38a289a86b3980c49d9ab9e9d38e42e593f22c6a0da17d690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137000

Malicious code in riya-9 npm...

EUVD-2025-140385

Malicious code in lia-9 npm...

Malicious code in wulan-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0df05fa5e11190477b33eb6ed24426437898ba498bbdeeeffd8d7ce17500f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50ec8d85d61a1a65ef959b73aa85042eee32b6934fb45ea05ef4655918ce85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add836ee41845fcaa3aab963631f2597e7cc07cb968bd6fcf694ee45d3cdf6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 720d05589602952a1dbd7420fed6365f923622f5523afff79cbb13aeb099341e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb86ae8e0b6366ddb8a605d77ed5beb375886188a790011c25ba0c953874548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156257 Malicious code in ilang-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0ca71871868153dc25aa936f6d8b6c4670f2c6b811eece351032a2e962f90f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152885 Malicious code in aril-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb86ae8e0b6366ddb8a605d77ed5beb375886188a790011c25ba0c953874548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160850 Malicious code in muklis-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbe755ed9ce4525aa8423c39adbd63523c3534194260fc33a4186aa2e9bf811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154339 Malicious code in dia-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb6a0dc98ae86918a59e3c4263041262d0319faa888033a7499b53f5afb5ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146237

Malicious code in wulan-9 npm...

Malicious code in hafiz-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37720c02884e8e08ce0110aed4a12302f6f160fb449ee314265326661f59bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...