PYSEC-2026-645 instack-undercloud vulnerable to symlink attack on tmp files

A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploi...

EUVD-2025-117294

Malicious code in intense-turquoise-pike npm...

EUVD-2025-117063

Malicious code in steep-brown-pike npm...

EUVD-2025-74269

Malicious code in selectivepikefuchsia-11 npm...

EUVD-2025-79084

Malicious code in hostilepikez3n npm...

EUVD-2025-79005

Malicious code in inquisitivepikez3n npm...

MAL-2025-85818 Malicious code in gentle_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afb0082e6d7f3ce15625140a49fd396e09265409be5d17febe4e00982d4156d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55466

Malicious code in chronic-indigo-pike npm...

EUVD-2025-51898

Malicious code in special-gold-pike npm...

Malicious code in lucky-plum-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a12967ce28e73b2de6a84a8cfdc72a4df4dfdea4c4323be4a643a18c42ead7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53410

Malicious code in lucky-plum-pike npm...

EUVD-2025-51337

Malicious code in universal-purple-pike npm...

MAL-2025-71763 Malicious code in zealous-coffee-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecef60967f4d7a48ff1eaf48ae4b9155c8c2354dc7a3505ad9790a4fa7a508d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53536

Malicious code in lesser-green-pike npm...

EUVD-2025-55898

Malicious code in alternative-amethyst-pike npm...

EUVD-2025-50886

Malicious code in zealous-coffee-pike npm...

EUVD-2025-52952

Malicious code in odd-purple-pike npm...

EUVD-2025-54197

Malicious code in fun-maroon-pike npm...

EUVD-2025-55903

Malicious code in allied-white-pike npm...

EUVD-2025-53273

Malicious code in mid-scarlet-pike npm...