EUVD-2025-51817

Malicious code in statutory-lavender-pike npm...

MAL-2025-69239 Malicious code in lucky-plum-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a12967ce28e73b2de6a84a8cfdc72a4df4dfdea4c4323be4a643a18c42ead7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71763 Malicious code in zealous-coffee-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecef60967f4d7a48ff1eaf48ae4b9155c8c2354dc7a3505ad9790a4fa7a508d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53863

Malicious code in immediate-bronze-pike npm...

EUVD-2025-55898

Malicious code in alternative-amethyst-pike npm...

EUVD-2025-51337

Malicious code in universal-purple-pike npm...

EUVD-2025-55466

Malicious code in chronic-indigo-pike npm...

EUVD-2025-53536

Malicious code in lesser-green-pike npm...

EUVD-2025-51898

Malicious code in special-gold-pike npm...

EUVD-2025-54197

Malicious code in fun-maroon-pike npm...

EUVD-2025-51319

Malicious code in unpleasant-black-pike npm...

EUVD-2025-59068

Malicious code in isolatedpikez3n npm...

Malicious code in obliged_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc14b946398b1742fb4d43e2ab1176f74e51729df7da104e54a6d5d07baae70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58094 Malicious code in orthodox_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d455e177b0666371018a0827bae7f3a6a16ea575cacd7d1ed6c0d76e93ad1eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2006-4034

Malware in sbrugna...

Malicious code in far-gray-pike (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9626 Malicious code in far-gray-pike (npm)

--- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2006-4041

SQL injection vulnerability in Pike before 7.6.86, when using a Postgres database server, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors...

OpenStack Nova DoS by rebuilding the same instance with a new image multiple times

An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was...

GHSA-53WM-97P6-582F instack-undercloud vulnerable to symlink attack on tmp files

A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploi...