97 matches found
Malicious code in tomi-telurtahu43-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c841d61ce4052c34b10ccbb04d9da153bd20f4d692cbaf6112a9783781c08985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ogi-buburayam12-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8bfdd5d14ea18125654670a72c5043daee217cb8d6ad6bafa09938a68bdffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-63179 Malicious code in gita-pecel80-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6462d13f9f9cf28486f72e74dd4b68aa7766c7774784a508bf79fc982392eb0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in individual_galliform_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80106ecbde271e31981a3391c965d9cf6bba5bd75e7ed2b06cb7febb6ce3aa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-60542 Malicious code in gentle_beaver_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dceb512e019b2e1c0327d771797c2fe67a4b538e7ffcc23205c8421a6758176c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in native_goat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa89e0f64da6adda31522e2bc0a282055ef830c95f05a53a2798ebf22087db26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in vina-semur14-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b869e1b728c8ce9b4e4ea1d2689eeac947f15ef0ff623eabd39d65a8c5ff0b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eka-gembus55-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e7e9b54bc9c0111d3902b5db42cd00bfb511c042d65ebd27611f498a435cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jaja-mendut94-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c34d2792b10b4d5a193e8edfdfc5fd2c5b9e54c7611f36db2c72367fffe36d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in wibowo-keripik73-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e371d15c3a402096514abe38685fb5fd48a2d137722fa57fac437a1032674eb4 The package wibowo-keripik73-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
RLSA-2025:10148 Important: python3.11 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
Linux Distros Unpatched Vulnerability : CVE-2023-45807
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana following the license change in early 2021. There is an issue with the...
[SECURITY] Fedora 42 Update: reposurgeon-5.3-1.fc42
Reposurgeon enables risky operations that version-control systems don't want to let you do, such as editing past comments and metadata and removing commits. It works with any version control system that can export and import git fast-import streams, including git, hg, fossil, bzr, CVS and RCS. It...
cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory
A flaw was found in the Python tarfile module. This vulnerability allows attackers to bypass extraction filters, enabling symlink targets to escape the destination directory and allowing unauthorized modification of file metadata via the use of TarFile.extract or TarFile.extractall with the filte...
Important: python3.11
Issue Overview: Allows modifying some file metadata e.g. last modified with filter="data" or file permissions chmod with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using...
CVE-2021-38342
The Nested Pages WordPress plugin = 3.1.15 was vulnerable to Cross-Site Request Forgery via the npBulkActions and npBulkEdit adminpost actions, which allowed attackers to trash or permanently purge arbitrary posts as well as changing their status, reassigning their ownership, and editing other...