Malicious code in kurniawan-empal58-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556cea6631a1809bf07076c8f8a965015f3ede7ad69b5db5086a33fa410a9c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74177 Malicious code in lisa-kue38-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98f5b47e562064a3ddee9bd88b71a86c84af1dead750f203c0b8324f01e361e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c341bcdaaed3945acb51c1312b486e22ffa89bfd0169328df8631862d077bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62542 Malicious code in dian-nasi56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c54a7164e488998a7bc70ccd0a6b219d1743c610659d20b84a5e733f69c474a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51c1e4fdbcd72076b778b77b23d9e69a35aba1e1be038aa4e831f3eddd21973f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: kustomize, direnv, mage, mongodb-kubernetes-operator, regclient, custom-pod-autoscaler, kubernetes-csi-external-attacher, glow, kubernetes-dashboard-web, oras, spark-operator, terraform-provider-time, mkcert, fulcio, contour, docker-machine-driver-harvester,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: kustomize, direnv, mage, mongodb-kubernetes-operator, regclient, custom-pod-autoscaler, kubernetes-csi-external-attacher, glow, kubernetes-dashboard-web, oras, spark-operator, terraform-provider-time, mkcert, fulcio, contour, docker-machine-driver-harvester,...

Fedora 43 : cri-o1.31 (2025-20a9e0e990)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-20a9e0e990 advisory. - Update to release v1.31.13 - Resolves: rhbz2333357, rhbz2398406, rhbz2398661, rhbz2399063, rhbz2399337 - Upstream fix Tenable has extracted the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987579 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: Fix crash due to OOB write the driver uses libata's tag values from in various...

CLSA-2025-1760704001 Update of sudo

Bump version to 1.8.23-10.0.1.3...

EUVD-2014-5211

Malware in sbrugna...

EUVD-2023-2612

Malicious code in bioql PyPI...

EUVD-2025-30484

Malicious code in bioql PyPI...

Security update for podman

This update for podman fixes the following issues: CVE-2025-6032: Fixed machine init command failing to verify TLS certificate bsc1245320 Fix conditional Requires remove deprecated sleversion macro Update to version 5.4.2: Add release notes for v5.4.2 Fix a potential deadlock during podman cp...

CVE-2025-59565

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-order-bump-offer-for-woocommerce allows Stored XSS.This issue affects Upsell Order Bump Offer for WooCommerce: from n/a through = 3.0.7...

CVE-2025-59565

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-order-bump-offer-for-woocommerce allows Stored XSS.This issue affects Upsell Order Bump Offer for WooCommerce: from n/a through = 3.0.7...

WordPress Upsell Order Bump Offer for WooCommerce Plugin <= 3.0.7 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Upsell Order Bump Offer for WooCommerce versions = 3.0.7...

CVE-2025-59565

CVE-2025-59565 is a Stored XSS in the Upsell Order Bump Offer for WooCommerce WordPress plugin affecting versions up to 3.0.7. Root cause: improper input neutralization during web page generation. Impact: attacker-supplied script stored on vulnerable sites; Wordfence notes patch status as Patched...

CVE-2025-59565 WordPress Upsell Order Bump Offer for WooCommerce Plugin <= 3.0.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-order-bump-offer-for-woocommerce allows Stored XSS.This issue affects Upsell Order Bump Offer for WooCommerce: from n/a through = 3.0.7...

CVE-2025-59565: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-order-bump-offer-for-woocommerce allows Stored XSS.This issue affects Upsell Order Bump Offer for WooCommerce: from n/a through = 3.0.7...