MAL-2025-50856 Malicious code in arif-lapis5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af04416435d09131ab8533275713b21fd7e5c02baec54881b7f51fc83914c622 The package arif-lapis5-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50266 Malicious code in dono-tahu49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4abfec89d3e2db8027bb49cfb0d4981a32daea84c8a319527bcd7147e29b3215 The package dono-tahu49 was found to contain malicious code...

Malicious code in dono-tahu49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4abfec89d3e2db8027bb49cfb0d4981a32daea84c8a319527bcd7147e29b3215 The package dono-tahu49 was found to contain malicious code...

Malicious code in tuti-lupis86-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644ee3974a45ed9b4d2fbce12c79e14c3622570f56b0c280ba01b110649ce7ad The package tuti-lupis86-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in bamboo-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913210ebd3bdb67c851e13118eff395e1df72403e313fcedfa4a1e9d4253746b The package bamboo-init was found to contain malicious code...

Malicious code in candra-dradag91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d69f180542bc46a9257d7ee9d9f5acbf4174fe17b22c88190bc72b9f90fe35d The package candra-dradag91-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in gibertserct12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b1430f9e3f043decd0a84c7c5bba26bb9eb4bcb9fc07ba0a9e1a0d9d3c025d7 The package gibertserct12 was found to contain malicious code...

MAL-2025-51591 Malicious code in dono-jengkol69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5527fba28c12e5de920712eab3631bf2adb27bcb12c101c91225ad7089809030 The package dono-jengkol69-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-51952 Malicious code in gibertserct12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b1430f9e3f043decd0a84c7c5bba26bb9eb4bcb9fc07ba0a9e1a0d9d3c025d7 The package gibertserct12 was found to contain malicious code...

MAL-2025-51450 Malicious code in citra-sate14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb62cc5423ff5d9078179f29746ea010686b11fb23567ff440fd15f6c887a761 The package citra-sate14-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in react-icons-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224e1d5b1a2b01321da822c843e2013f28320e4b9d4d74487daef59c812557f6 The package react-icons-toolkit was found to contain malicious code. Source: ghsa-malware...

[SECURITY] Fedora 43 Update: rust-reqsign-0.18.1-1.fc43

Signing HTTP requests for AWS, Azure, Google, Huawei, Aliyun, Tencent and Oracle services...

[SECURITY] Fedora 43 Update: rust-reqsign-aws-v4-2.0.1-1.fc43

AWS SigV4 signing implementation for reqsign...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix invalid derefence of sblvbptr CVE-2022-50516 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 - Kernel-5.10 Extra. Visit this page to learn more about Amazon Linux 2 AL2...

Important: xmlunit

Issue Overview: XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet used for an XSLT transformation, because XSLT extension functions are enabled. CVE-2024-31573 Affected Packages: xmlunit Issue Correction: Run dnf update xmlunit...

Important: amazon-efs-utils

Issue Overview: regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those tunable mitigations already provide sane...

Medium: tomcat

Issue Overview: Improper Resource Shutdown or Release vulnerability in Apache Tomcat. If an error occurred including exceeding limits during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but left for the garbage...

Important: kernel-livepatch-6.1.153-175.280

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcpsksk-fastopenrsk in tcpdisconnect. CVE-2025-39955 Affected Packages: kernel-livepatch-6.1.153-175.280 Issue Correction: Please ensure you have live patching enabled. Run dnf update...

Low: firefox

Issue Overview: No CVE associated with this advisory Affected Packages: firefox Note: This advisory is applicable to Amazon Linux 2 - Firefox Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories...

Low: curl

Issue Overview: Out of bounds read for cookie path NOTE: https://curl.se/docs/CVE-2025-9086.html NOTE: Introduced with: https://github.com/curl/curl/commit/f24dc09d209a2f91ca38d854f0c15ad93f3d7e2d curl-7310 NOTE: Fixed by: https://github.com/curl/curl/commit/c6ae07c6a541e0e96d0040afb62b45dd377113...