Malicious code in wulan-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0df05fa5e11190477b33eb6ed24426437898ba498bbdeeeffd8d7ce17500f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add836ee41845fcaa3aab963631f2597e7cc07cb968bd6fcf694ee45d3cdf6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146211

Malicious code in yuda-9 npm...

MAL-2025-154339 Malicious code in dia-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb6a0dc98ae86918a59e3c4263041262d0319faa888033a7499b53f5afb5ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152885 Malicious code in aril-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb86ae8e0b6366ddb8a605d77ed5beb375886188a790011c25ba0c953874548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156257 Malicious code in ilang-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0ca71871868153dc25aa936f6d8b6c4670f2c6b811eece351032a2e962f90f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170601 Malicious code in yuda-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548755b2a966433d9c646f6d573fdf9793791a416868249576d8cc0407eb4e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156312 Malicious code in ilop-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a35081871394befe6e9ca9aa5b2a1d4ec5e953d09d47d4c571ac9ffdb76482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160850 Malicious code in muklis-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbe755ed9ce4525aa8423c39adbd63523c3534194260fc33a4186aa2e9bf811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

xorg-x11-server-Xwayland security update

An update is available for xorg-x11-server-Xwayland. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Xwayland is an X server for running X clients under Wayland...

libssh security update

An update is available for libssh. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libssh is a library which implements the SSH protocol. It can be used to...

Enalean Tuleap Community Edition和Enalean Tuleap Enterprise Edition 跨站请求伪造漏洞

Enalean Tuleap Community Edition and Enalean Tuleap Enterprise Edition are both an open source suite from Enalean Open Source designed to improve the management of software development and collaboration. A cross-site request forgery vulnerability exists in Enalean Tuleap Community Edition and...

RockyLinux 9 : libssh (RLSA-2025:20943)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:20943 advisory. libssh: out-of-bounds read in sftphandle CVE-2025-5318 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note...

Moderate: Red Hat Security Advisory: libssh security update

An update for libssh is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

EUVD-2025-74828

Malicious code in chubbyfireflyapricot-9 npm...

Malicious code in shy_skunk_lavender-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6c45e6253aa2521e1325c944b97b2697a370b54a6e2bca87e692e9631c712d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74155

Malicious code in thoughtlessflamingoamethyst-9 npm...

EUVD-2025-74257

Malicious code in shallowdogivory-9 npm...

Malicious code in genetic_owl_peach-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4133b2777c508a082ff037aadc55f0650b8f0a671c991b99ac8efaec8c3a4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in camel_gray-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d27a68d53b333cd711dd47c1e15978576ca7c80ec02098bc77e138f7f48ebda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...