MAL-2025-58732 Malicious code in siska-soto17-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab036cbd60b84bb995d7b36319b30615b180168b5d89f1918e0a75151c92545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57707 Malicious code in nadia-dodol48-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c56401a22ea57ece9d22d7f80f812e55e2598537b9d52c673a632b70e729e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59311 Malicious code in vida-saguer14-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c502835b4a1b4065f5f3e06d1f55ac09acc13b68b127fb6ea76e7b1349b324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55515 Malicious code in candra-tapai87-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aafa83bef44adc33087d3609956077087601854d77844291f12d861dda1c01b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Advisory ROSA-SA-2025-3066

Software: dhcp 4.4.2 OS: ROSA Virtualization 3.0 unaffected versions = dhcp-4.4.2-19.b1.rv30 affected versions dhcp-4.4.2-19.b1.rv30 CVE-ID: CVE-2021-25217 BDU-ID: CVE-Crit: HIGH CVE-DESC.: A software vulnerability providing the DHCP Dynamic Host Configuration Protocol service to the network is...

MAL-2025-54036 Malicious code in oktafian-kentang38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5430083772d95dc46cc5d9c51f373d9480789dfe9b6250dc6efdc9dae3e16b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53642 Malicious code in polycard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7e18708fe081142405b3e556739484b4ac0ace94ce702284ee12f53190543f3 The package polycard was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-52497 Malicious code in tuti-martabak94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73533246e7fcf0a5e5203566557f0fd86a8f56d9d0a7d04e91e56cc9182b0f9 The package tuti-martabak94-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in post-purchase-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7c59be0aca6f22fc3b7ea58767ce53286e50138bbb75674cc2a7cdce3d1ad4 The package post-purchase-frontend was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-49731 Malicious code in post-purchase-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7c59be0aca6f22fc3b7ea58767ce53286e50138bbb75674cc2a7cdce3d1ad4 The package post-purchase-frontend was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

bind: Cache poisoning attacks with unsolicited RRs

A vulnerability exists in BIND’s DNS resolver logic that makes it overly permissive when accepting resource records RRs in responses. Under certain conditions, this flaw allows attackers to inject unsolicited or forged DNS records into the cache. This can be exploited to poison the resolver cache...

bind: Resource exhaustion via malformed DNSKEY handling

A vulnerability was found in BIND 9 resolvers, where processing malformed DNSKEY records from a specially crafted zone can lead to resource exhaustion, primarily causing excessive CPU utilization. This issue enables a remote, unauthenticated attacker to degrade resolver performance and potentiall...

Pi-hole Ad-Blocker Detection (DNS)

DNS TCP and UDP based detection of the Pi-hole Ad-Blocker. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ALSA-2025:19950 Important: bind9.18 security update

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Important: bind9.18 security update

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Malicious code in startupkit-umbraco-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee52f18349f18de229409043c934e6b5e843d702d63be72f2058f495d5cc7355 The package startupkit-umbraco-webpack was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49455 Malicious code in startupkit-umbraco-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee52f18349f18de229409043c934e6b5e843d702d63be72f2058f495d5cc7355 The package startupkit-umbraco-webpack was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in telstraprogrammablenetworkapilib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd4e014618431bb6a2575fa310e46d678de61362a3b66087427582c4ac2a972 The package telstraprogrammablenetworkapilib was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49454 Malicious code in telstraprogrammablenetworkapilib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd4e014618431bb6a2575fa310e46d678de61362a3b66087427582c4ac2a972 The package telstraprogrammablenetworkapilib was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in karemv1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be53d7d069f1115ab0b8be4e3243af9ffb512d8a6dc0e31b5395852b1cbc3cd The package karemv1 was found to contain malicious code. Source: ghsa-malware 3f4cd13aca826d2f26c0f7927f298a62ee3f5a66fcc8567eff78027b93a02144 Any...