Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nginx (UTSA-2026-091420)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091420 advisory. ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as...

ag-llama-api (>=0.0.8, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.11) +27 more potentially affected by CVE-2026-9856 via transformers (4.29.2)

transformers PYPI version 4.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ag-llama-api =0.0.8, =0.0.4, =0.0.4, =0.0.11, =0.0.3, =0.1.10, =0.2.0, =0.1.0, =0.0.1, =0.5.1.dev20240517, =0.5.2 and more Source cves:...

BIT-NGINX-GATEWAY-2021-3618

ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic fr...

EUVD-2025-117161

Malicious code in private-violet-alpaca npm...

EUVD-2025-104082

Malicious code in littlealpacaz3n npm...

EUVD-2025-103395

Malicious code in obedientalpacaz3n npm...

EUVD-2025-95088

Malicious code in silkyalpacaz3n npm...

Malicious code in identical_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145f95f5a55a303acf898b70ba3061882d632019e27c143439902615b2979551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-106346

Malicious code in boredalpacaz3n npm...

EUVD-2025-106244

Malicious code in changingalpacaz3n npm...

EUVD-2025-74232

Malicious code in smoggyalpacateal-48 npm...

EUVD-2025-75624

Malicious code in slightalpaca-biggestdev npm...

EUVD-2025-76572

Malicious code in independentalpaca-appteadev npm...

EUVD-2025-76722

Malicious code in greatalpaca-silentdev npm...

EUVD-2025-76874

Malicious code in fatalalpaca-gooddev npm...

EUVD-2025-75514

Malicious code in successivealpaca-notthedev npm...

EUVD-2025-75606

Malicious code in smartalpaca-appteadev npm...

MAL-2025-108857 Malicious code in smart_alpaca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d4319d72fb4e34ae2a67e415f75137a1d8f6dae2110c2460f1f01f1a8eb66c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77542

Malicious code in productivealpacaaquamarine-22 npm...

MAL-2025-108509 Malicious code in selective_alpaca_violet-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7ab4287c079843020a63b68a1e83e46b13ffcfa11c3ca71a641c77ad2a01e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...