Malicious code in tuti-ketan79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccebe71b904f3c5ec3483d28e29c04f02b4584dc0ff8e3c1d376c793e47f80ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-ruwet33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea63ec2437617223d00988862a567a6b64976df8df7b1d67b50d2c4b640a8d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-serabi6-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0f2632332765cafff697ef34ec5d5890c5908edd0020b0392219d613b440b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85706 Malicious code in frozen_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716a217e3a36ed9156f774cefe9d5a462026c01705efc8eece323bd97e8e2ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76841 Malicious code in andi-rangginang63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ecd1823f954ac1d2dc3c1163376474235a65016d63f8aff798a9b919d4966a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78648 Malicious code in hadianto-liwet69-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016244dd40c2c9c08c96a9267923de1cca0186cea2cad71c5f578b9a3c4a8310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ember-addon-with-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 030efb54b3c7ce3807868d73f64d415effba5c936da7b4fad9b37a7e184fbff7 The package ember-addon-with-dependencies was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-76661 Malicious code in ember-addon-with-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 030efb54b3c7ce3807868d73f64d415effba5c936da7b4fad9b37a7e184fbff7 The package ember-addon-with-dependencies was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in dono-bakso34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529f4a9dd8d62cefe7807000c170a7180235923e8e40663ad78eab02565e96a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning-peach-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169d69ae17e27eb096d380af5fd5736d432545cc3bf827edb7aa1d0a9a194899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

ALSA-2025:20928 Important: ipa security update

AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA CVE-2025-7493 For more details...

RHEL 10 : ipa (RHSA-2025:20994)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:20994 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-bas...

ALSA-2025:21034 Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

EUVD-2025-50790

Incorrect security UI in SplitView in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted domain name. Chromium security severity: Low...

CVE-2025-12446

Incorrect security UI in SplitView in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted domain name. Chromium security severity: Low...

CVE-2025-12446

Incorrect security UI in SplitView in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted domain name. Chromium security severity: Low...

USN-7866-1 intel-microcode vulnerabilities

Barak Gross discovered that some Intel® Xeon® processors with SGX enabled did not properly handle buffer restrictions. A local authenticated user could potentially use this issue to escalate their privileges. CVE-2025-20053 Avinash Maddy discovered that some Intel® processors did not properly...

CVE-2025-12446

Incorrect security UI in SplitView in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted domain name. Chromium security severity: Low...

CVE-2025-12446

Incorrect security UI in SplitView in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted domain name. Chromium security severity: Low...

CVE-2025-12446

The CVE-2025-12446 issue affects Google Chrome (Chromium-based) before version 142.0.7444.59, where an Incorrect security UI in SplitView could be exploited by a user who engaged in specific UI gestures to trigger UI spoofing via a crafted domain name. The connected Astra/Fedora/DEBIAN/EUVD entri...