Malicious code in budi-lapis49-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3983a9f046a9c7e1e72b4760988c158347db488469ae1eb3a63e00782904bb9 The package budi-lapis49-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in tuti-tek100-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7b5f0889388386c27b0a630269f4d13dcf3b6c01d1ad2013101ebc8f544126 The package tuti-tek100-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-49739 Malicious code in ade-lapis63-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee21f791e67aa0ee060f998099b1da77491b96757c53df2011b2e6ce00ca9ae8 The package ade-lapis63-crottsekebon was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51956 Malicious code in gilang-empal50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6973ed0332e1568b6b044bd4c988bab3f7f567beaf80435cdb85c80da629cc The package gilang-empal50-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in citra-klanting72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d4d20d51db636603da12698ff2b59d588e8f9559742670e3eb9207501d664f The package citra-klanting72-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51479 Malicious code in dewanto-kue27-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd1a634921848eeb8fcdbf185f9a95addedfb7d4c633e6b11f7331c4dcf9d87 The package dewanto-kue27-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in agus-bakwan93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98bb5383f57693248660985a0eec9e3feac9292bcb89830d0eb5d022666efbab The package agus-bakwan93-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in citra-keripik10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74b56de42d05c17503c196b4dc3e7b092f4876bb630efebac259290973cc803e The package citra-keripik10-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51555 Malicious code in dian-lapis33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 495ec1e20b94e367b114abb081bd484962a5e6c3e17a6e4643187695bd12d3db The package dian-lapis33-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

PT-2025-51659

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's ksmbd module where a socket is leaked when the per-IP connection limit is exceeded during connection attempts. Specifically, when ksmbd kthread fn...

CVE-2025-55278

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...

SUSE SLED15: libopenjpeg1 / libopenjpeg1-32bit / openjpeg / openjpeg-devel / etc (SUSE-SU-2025:3946-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3946-1 advisory. - CVE-2023-39327: Fixed that malicious files can cause a large loop that continuously prints warning...

EUVD-2025-37960

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990550)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990550 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable will be a...

CVE-2025-55278

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...

CVE-2025-55278 HCL DevOps Loop is susceptible to an improper authentication vulnerability

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...

CVE-2025-55278 HCL DevOps Loop is susceptible to an improper authentication vulnerability

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...

CVE-2025-55278

CVE-2025-55278 affects HCL DevOps Loop. Concrete details across sources show improper authentication in the API authentication middleware, allowing tokens to be accepted without proper validation of expiration or cryptographic signature. Affected component is the API authentication layer; root ca...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop via the applysubstitution function in the bsdtar when used with -s pathname-rewrite rules. An attacker can cause excessive memory allocation leading to application crash by supplying malicious input such as an empty patter...

Security update for openjpeg

This update for openjpeg fixes the following issues: CVE-2023-39327: Fixed that malicious files can cause a large loop that continuously prints warning messages on the terminal bsc1227410. Other bug fixes: Ensure no bundled libraries are used bsc1250467. Patch Instructions: To install this SUSE...