EUVD-2025-146211

Malicious code in yuda-9 npm...

Malicious code in yuda-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548755b2a966433d9c646f6d573fdf9793791a416868249576d8cc0407eb4e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2301a394fc5408826de262f8d53e86f9bfe1b518b820863db402075a17b86c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbe755ed9ce4525aa8423c39adbd63523c3534194260fc33a4186aa2e9bf811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a35081871394befe6e9ca9aa5b2a1d4ec5e953d09d47d4c571ac9ffdb76482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f43948e5069303287184cbe032338dacef2c634bfae4faf5ee24a326db6c531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170601 Malicious code in yuda-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548755b2a966433d9c646f6d573fdf9793791a416868249576d8cc0407eb4e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156312 Malicious code in ilop-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a35081871394befe6e9ca9aa5b2a1d4ec5e953d09d47d4c571ac9ffdb76482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

libssh security update

An update is available for libssh. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libssh is a library which implements the SSH protocol. It can be used to...

xorg-x11-server-Xwayland security update

An update is available for xorg-x11-server-Xwayland. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Xwayland is an X server for running X clients under Wayland...

Enalean Tuleap Community Edition和Enalean Tuleap Enterprise Edition 跨站请求伪造漏洞

Enalean Tuleap Community Edition and Enalean Tuleap Enterprise Edition are both an open source suite from Enalean Open Source designed to improve the management of software development and collaboration. A cross-site request forgery vulnerability exists in Enalean Tuleap Community Edition and...

RockyLinux 9 : libssh (RLSA-2025:20943)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:20943 advisory. libssh: out-of-bounds read in sftphandle CVE-2025-5318 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note...

Moderate: Red Hat Security Advisory: libssh security update

An update for libssh is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Malicious code in shy_skunk_lavender-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6c45e6253aa2521e1325c944b97b2697a370b54a6e2bca87e692e9631c712d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74828

Malicious code in chubbyfireflyapricot-9 npm...

EUVD-2025-74257

Malicious code in shallowdogivory-9 npm...

EUVD-2025-74155

Malicious code in thoughtlessflamingoamethyst-9 npm...

Malicious code in genetic_owl_peach-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4133b2777c508a082ff037aadc55f0650b8f0a671c991b99ac8efaec8c3a4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72658

Malicious code in camelgray-9 npm...

Malicious code in camel_gray-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d27a68d53b333cd711dd47c1e15978576ca7c80ec02098bc77e138f7f48ebda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...