MAL-2025-80583 Malicious code in patria-gulai88-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a839a8962637803c97ea0d3d0bb1cf78cb50cabdd7b47a4513c20aea54fb290c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79264 Malicious code in joko-sambalado4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d04bcedb9e12ebd38d53368e12daae9b97424123ae799823fd8e63e3d24a057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gaplek1-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1915ec43353a078057d15bb5c6b3de4e1d92f4175255bc26643530f6fa997e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better-jade-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df08c5a6310ebc1dc1fc88ff782a730a7113a0fd8b9118299af594c8773de6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68866 Malicious code in individual-aquamarine-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f0d6f611f831170a473f4c9af646d6a790ef683217ee2e24f85cfda770a41a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63825 Malicious code in kiki-sambel18-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85fd8c73cec29b127d821acf7a49d6d862b6d1a0b4190b9370347d9028ebb3a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46438

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows versions prior to 23.160 Description An out-of-bounds write issue exists in IntelR PROSet/Wireless WiFi Software for Windows. This flaw, located within Ring 2: Device Drivers, could allow for a...

PT-2025-46532

Name of the Vulnerable Software and Affected Versions Grafana Databricks Datasource Plugin versions 1.12.1 through 1.12.0 Description The Grafana Databricks Datasource Plugin has an issue where, with Oauth passthrough enabled, multiple users sharing a single Grafana instance and datasource may...

PT-2025-46422

Name of the Vulnerable Software and Affected Versions IntelR QAT Windows software versions prior to 2.6.0 Description An out-of-bounds read issue exists in some IntelR QAT Windows software. A system software adversary with an authenticated user and a high complexity attack may be able to cause a...

PT-2025-46408

Name of the Vulnerable Software and Affected Versions IntelR One Boot Flash Update IntelR OFU versions prior to 14.1.31 Description The software has default permissions that may allow a privilege escalation. An unprivileged software adversary with an authenticated user and a complex attack may...

MAL-2025-57969 Malicious code in ogi-kacang51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d543248b450558300ee5ef6b446ddd8715d6e53e961e8994b82af081f48cf171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-donat60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4302848a127424f40a74202176fdf311fe8727496cfab450cf69b58124009b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-tiwul78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b244749d7ae618b401e98e506607a0befceaddf598683f83e6760ca4ed4db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46156

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2025.3.104432 Description Improper access control in JetBrains YouTrack allowed modification of MCP tool logic. Recommendations Update to version 2025.3.104432 or later...

PT-2025-46150

Name of the Vulnerable Software and Affected Versions JetBrains Hub versions prior to 2025.3.104992 Description A race condition existed that allowed bypassing the user limit through invitations. Recommendations Update JetBrains Hub to version 2025.3.104992 or later...

PT-2025-45555

Name of the Vulnerable Software and Affected Versions Better Find and Replace – AI-Powered Suggestions plugin for WordPress versions through 1.7.7 Description The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is susceptible to Limited Code Injection. This is a result of...

PT-2025-45180

Name of the Vulnerable Software and Affected Versions Better Find and Replace – AI-Powered Suggestions plugin for WordPress versions through 1.7.7 Description The software is susceptible to unauthorized API usage because of a missing capability check within the rtafar ajax function. This allows...

Google Chrome Security Update (stable-channel-update-for-desktop-2025-11) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

[SECURITY] Fedora 43 Update: rust-attribute-derive-macro-0.10.5-1.fc43

Clap for proc macro attributes...

PT-2025-45093

Name of the Vulnerable Software and Affected Versions KiotViet Sync plugin for WordPress versions up to and including 1.8.5 Description The KiotViet Sync plugin for WordPress is susceptible to unauthorized data modification. This is due to a missing capability check within the saveConfig function...