[SECURITY] Fedora 43 Update: timg-1.6.3-5.fc43

A user-friendly terminal image viewer that uses graphic capabilities of terminals Sixel, Kitty or iTerm2, or 24-bit color capabilities and Unicode character blocks if these are not available. On terminals that implement the Sixel protocol, the Kitty Graphics Protocol, or the iTerm2 Graphics...

TencentOS Server 4: kitty (TSSA-2025:0486)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0486 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Malicious code in kitty-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa17cdd5c6055b304f7eff807383ba554eb6eadc8e759939d67095084dc7d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76464

Malicious code in kitty-teadev npm...

MAL-2025-104834 Malicious code in kitty-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa17cdd5c6055b304f7eff807383ba554eb6eadc8e759939d67095084dc7d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

The vulnerability of the open_actions.py file of the GPU KiTTY-based terminal emulator allows a hacker to execute arbitrary code.

The vulnerability of the openactions.py file of the GPU KiTTY-based terminal emulator is related to a deficiency in the source verification mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...

EUVD-2015-7772

Malware in sbrugna...

EUVD-2020-23271

Malware in sbrugna...

EUVD-2014-5582

Malware in sbrugna...

EUVD-2022-44530

Malicious code in bioql PyPI...

EUVD-2024-22365

Malicious code in bioql PyPI...

EUVD-2025-14660

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-43929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openactions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted...

Malicious code in test-mlw2-sudds-sains-kitty-jubas (npm)

The package test-mlw2-sudds-sains-kitty-jubas was found to contain malicious code...

Malicious code in test-mlw2-sykes-kitty (npm)

The package test-mlw2-sykes-kitty was found to contain malicious code...

MAL-2025-36391 Malicious code in test-mlw2-sykes-kitty (npm)

The package test-mlw2-sykes-kitty was found to contain malicious code...

MAL-2025-8974 Malicious code in @malware-test-sudds-sains-kitty-jubas/test-mlw3-sudds-sains-kitty-jubas (npm)

The package @malware-test-sudds-sains-kitty-jubas/test-mlw3-sudds-sains-kitty-jubas was found to contain malicious code...

MAL-2025-36368 Malicious code in test-mlw2-sudds-sains-kitty-jubas (npm)

The package test-mlw2-sudds-sains-kitty-jubas was found to contain malicious code...

15,000 Fake TikTok Shop Domains Deliver Malware, Steal Crypto via AI-Driven Scam Campaign

Cybersecurity researchers have lifted the veil on a widespread malicious campaign that's targeting TikTok Shop users globally with an aim to steal credentials and distribute trojanized apps. "Threat actors are exploiting the official in-app e-commerce platform through a dual attack strategy that...

Debian dla-4203 : kitty - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4203 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4203-1 [email protected] https://www.debian.org/lts/security/...