Malicious code in haruni-poke125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f27800ed5b7ffea490cbeb10342f30cbb5280fae4a0cf223268031ffb2618f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170439 Malicious code in verify-tac-malasikibaulu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77208fd1c9356d7ba25c4aa3d610696fb4c72bff8fda65df1c2cd0f58c101698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153670 Malicious code in billa-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6881f559ec0d21150806151bf41d27a9f6e624ee0b1b23136f76af606d7351c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2024-37387

Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, files in the PC where the product is installed may be altered...

Fedora 33 : golang-github-russellhaering-goxmldsig (2021-a2a7673da2)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-a2a7673da2 advisory. - In goxmldsig XML Digital Signatures implemented in pure Go before version 1.1.0, with a carefully crafted XML file, an attacker can completely...

File-sharing and cloud storage sites: How safe are they?

There it is again—that annoying message that pops up when your email client informs you that a file is too big to attach. Those of us that are confronted with this problem on a regular basis—and those of us that want to attach files that could get picked up by anti-malware scanners along the...

CVE-2020-15216

In goxmldsig XML Digital Signatures implemented in pure Go before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature validation and pass off an altered file as a signed one. A patch is available, all users of goxmldsig should upgrade to at least revision...