MAL-2025-51500 Malicious code in dewanto-sambalado51-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a6c6431d6dbc518fd244de305ed0342c25c0709eaf15f1263ec0bb2f961a2ba The package dewanto-sambalado51-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-49742 Malicious code in ade-rujak75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43e8c1cbcd2ff2bcaf96e60436aeb64736a2419e291da7de48caa07ee61beb9 The package ade-rujak75-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50308 Malicious code in eko-mendut86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae7460f2616b26451620f00476323550a55096f21853a21cb5af29da273ec16 The package eko-mendut86-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51818 Malicious code in fadhil-wajit86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7473b499056b5e5b4accd039ebe94fb90f441e7c320f34bcf4d9af052004abe The package fadhil-wajit86-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-49959 Malicious code in budi-papeda94-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 055e5f15199792b8c4d98c25bce0056cb229fb55e6d50d4e46359c622f4af9e6 The package budi-papeda94-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50173 Malicious code in citra-tempe45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ce8901e24e6970041399282d983a5af9e232ba4538414a6f87bd313bdcc721 The package citra-tempe45-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50407 Malicious code in fajar-taiwan84-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe50762d18c9ca5b0380565cc8c6e4476a5407236e2c5f76c831954a9632fdc1 The package fajar-taiwan84-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-52723 Malicious code in wibowo-kripik47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77808d2c991c85681f2c3568ed6ff7ed9115f46f5f037a8c56db594c2144275b The package wibowo-kripik47-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-52552 Malicious code in umi-kue77-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65645bfe24d4232908947f81f058da8c32818ec96e77aca063ba3aef4785aac5 The package umi-kue77-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded np...

MAL-2025-51489 Malicious code in dewanto-mangut4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4675a61b86037bb75ca6f1f8a21f1ef77d783a3f4c829e4794081845d99f785e The package dewanto-mangut4-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51099 Malicious code in budi-bakwan67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f261e8378185f6659c89ad5baf380f6cde7e00da2f22d466e98762a8f9eda8ca The package budi-bakwan67-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50994 Malicious code in bayu-rendang7-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bced12731ceeba57b727013bca5d57ecf21e7dfb1e43bbc09ca6aa725664b97 The package bayu-rendang7-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-51542 Malicious code in dewi-tumis32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f22c3bed5cce17c7060bc386ff83477cd81745de5430d1df964fbc85dd76f9f The package dewi-tumis32-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Exploit for Missing Authorization in Valvepress Wordpress_Automatic_Plugin

CVE-2021-4374 Testing Environment Complete testing package fo...

EUVD-2025-38126

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in PoloPag PoloPag Pix Automático para Woocommerce wc-polo-payments allows PHP Local File Inclusion.This issue affects PoloPag Pix Automático para Woocommerce: from n/a through =...

[SECURITY] Fedora 43 Update: python-fastapi-0.120.1-1.fc43

FastAPI is a modern, fast high-performance, web framework for building APIs with Python based on standard Python type hints. The key features are: =E2=80=A2 Fast: Very high performance, on par with NodeJS and Go thanks to Starlette and Pydantic. One of the fastest Python frameworks available...

Fedora 44 : runc (2025-6a0f63aaab)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6a0f63aaab advisory. Automatic update for runc-1.3.3-1.fc44. Changelog Wed Nov 5 2025 Bradley G Smith - 2:1.3.3-1 - Update to release v1.3.3 - Resolves: rhbz2411664,...

Creating a Linux Application Using VSCodium, Cline, OpenRouter, and Claude

In March I created a Windows Application Using Visual Studio Code, Cline, OpenRouter, and Claude. This was a program that created square screen captures. The user doesn't need to manually ensure the dimensions are a square. The program makes the window grow and shrink while keeping the length equ...

Astra Linux – Vulnerability in Thunderbird

An HTML email containing links to .pdf files can trigger automatic, unsolicited downloads of those files to the user’s desktop or home directory without any prompts, even if auto-saving is disabled. This behavior can be exploited to fill the disk with junk data e.g., using /dev/urandom on Linux o...

EUVD-2025-36984

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: facm: Refactor bind path to use free After an bind/unbind cycle, the acm-notifyreq is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer...