MAL-2025-52776 Malicious code in gita-rangi47-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46559ef1cc5139ebd6aa4535efb995921e05075eeddc29cb0a2e442b3996e97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53420 Malicious code in nadia-mieayam18-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2440db266502fef8b78c34eb938e2fc73387e46e738c110268ab9b6d87591923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-lepet54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba52775a0f40c515b1d31dfbc714b254055342775ccd50a4e6420a0cdff0c648 The package eko-lepet54-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in dian-ketoprak60-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af6db2228f123a81b8a2487bab64a7813204898ce5632323f4c1807e421b3aa The package dian-ketoprak60-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51289 Malicious code in cici-lepet39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f391479b31bfe738e8d27ef543dae26febaea0d6164beb4c45ec7227ea4ee93a The package cici-lepet39-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

CVE-2025-4115

A vulnerability classified as critical was found in Netgear JWNR2000v2 1.0.0.11. Affected by this vulnerability is the function defaultversionisnew. The manipulation of the argument host leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about this...

CVE-2024-0528 CXBSoft Post-Office HTTP POST Request update_go.php sql injection

A vulnerability, which was classified as critical, was found in CXBSoft Post-Office 1.0. Affected is an unknown function of the file /admin/pages/updatego.php of the component HTTP POST Request Handler. The manipulation of the argument version leads to sql injection. The exploit has been disclose...

CVE-2023-45805 Trojan Lockfilein pdm

pdm is a Python package and dependency manager supporting the latest PEP standards. It's possible to craft a malicious pdm.lock file that could allow e.g. an insider or a malicious open source project to appear to depend on a trusted PyPI project, but actually install another project. A project f...

Write access to the catalog for any user when restricted-admin role is enabled in Rancher

Impact This vulnerability only affects customers using the restricted-admin role in Rancher. For this role to be active, Rancher must be bootstrapped with the environment variable CATTLERESTRICTEDDEFAULTADMIN=true or the configuration flag restrictedAdmin=true. A flaw was discovered in Rancher...