Debian: Security Advisory (DLA-4369-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : squid:4 (RHSA-2025:21090)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:21090 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fixes: squid-cache: Squid vulnerab...

ROS-20251112-01

Squid proxy server vulnerability related to data boundary checking errors during encoding processing ASN.1 long SNMP OIDs in asnbuildobjid function in lib/snmplib/asn1.c. Exploitation of the of the vulnerability could allow an attacker to cause a denial of service Vulnerability of emailerrdata...

[SECURITY] [DLA 4369-1] squid security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4369-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès November 11, 2025 https://wiki.debian.org/LTS -...

EUVD-2025-102109

Malicious code in specifiedsquidz3n npm...

EUVD-2025-98670

Malicious code in genuinesquidz3n npm...

Malicious code in remote_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83c68777aeec42c190b67f04264122a2c5e3acd17aaa513927f177365602d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-104231

Malicious code in lexicalsquidz3n npm...

EUVD-2025-100277

Malicious code in confidentialsquidz3n npm...

MAL-2025-126732 Malicious code in genuine_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3318cde6c1227da48ce2a40fff4815f1bb53d69e4c1e35aee6186e7b024838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124758 Malicious code in able_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec28a7f2688f9f21844c6951f5e5adc9b96daea66be3b5dee700fd300d18ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elegant_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62fa709108e4ee1866057d168c515145822ee4c21afe087f330dc619d2636715 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123545 Malicious code in tender_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac4e0e904ec2fb3b39896c53a6a9da6b0f843208b57272a4c3abfa5c592e71b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-94755

Malicious code in tendersquidz3n npm...

Malicious code in open_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e494a7cf49f0c8c17884730fe619e94dbf8bee39a0e6b81473971147b4447be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in military_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9a8f65251d743b083cdb2d9248e2decf816ce5be817a23ed38c3dfba9c98c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124342 Malicious code in wispy_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05f6fc4e7a40f4fea34d6c19a54ec5b55d8442b98e21d2ce333a649f7699a645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122405 Malicious code in open_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e494a7cf49f0c8c17884730fe619e94dbf8bee39a0e6b81473971147b4447be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Important: Red Hat Security Advisory: squid security update

An update for squid is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling

A Information Disclosure vulnerability has been identified in the Squid web caching proxy. This flaw occurs when the application fails to properly redact sensitive Hypertext Transfer Protocol HTTP authentication credentials from an error response. A remote client can exploit this by triggering an...