MAL-2025-71134 Malicious code in thundering-rose-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672edcdbddf06ab83a7e9062bcb82a3db41c791e96b68e60f3ee399e1f14d04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67884 Malicious code in dry-rose-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a486998b80948e010817fdc7e3c5ad31fb7acfe6695ec6ed3eb6a13b896d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51591

Malicious code in technical-rose-antelope npm...

Malicious code in parliamentary-rose-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b727651060212a60cb1256b61b518f24b0dc2b142602872a55457521669cb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54378

Malicious code in fat-rose-parrotfish npm...

Malicious code in beneficial-rose-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980079b908e05a0d49f60077f6b3fa94b75dba030fbe34944cd4d9a51cba885e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in late-rose-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a3a49267017ecb787de2667b8ccfd34e0d22633c0246f4998eb4fdfd79d4a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in partial-rose-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ea2ed40996b8e41be803e7d2db7aa7183e5bb028d0e1b16d1ecf384f14eefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat-rose-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89212a1c82e9410e0cfe3c3649f02f059d2628ace716b771bc7002b8ddd5191a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67597 Malicious code in curved-rose-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4733f035a76f3a72778f0c4e738aff55017ba75200e0fd98d684ab72d0fb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68420 Malicious code in free-rose-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b272696f94e863e2b56b85ac9a06d05c0a77a205cbd1f8e08f5a00462ed3cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70196 Malicious code in raspy-rose-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4d4c77a8c91f0d229d4fba71f457026993679a350298256f2c5255a37936c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-988696)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988696 advisory. In the Linux kernel, the following vulnerability has been resolved: rose: Fix NULL pointer dereference in rosesendframe The syzkaller reported an issue: KASAN:...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990138)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990138 advisory. In the Linux kernel, the following vulnerability has been resolved: rose: Fix NULL pointer dereference in rosesendframe The syzkaller reported an issue: KASAN:...

Siemens SIMATIC Devices Integer Overflow or Wraparound (CVE-2025-21711)

net/rose: prevent integer overflows in rosesetsockopt This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503507; scriptversion"1.2";...

EUVD-2011-4825

Malware in sbrugna...

EUVD-2004-0742

Malware in sbrugna...

EUVD-2011-1496

Malware in sbrugna...

EUVD-2015-7877

Malware in sbrugna...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986622)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986622 advisory. In the Linux kernel, the following vulnerability has been resolved: rose: Fix NULL pointer dereference in rosesendframe The syzkaller reported an issue: KASAN:...