EUVD-2025-82480

Malicious code in cochran-tea-archive npm...

EUVD-2025-82359

Malicious code in cook-tea-archive npm...

EUVD-2025-82281

Malicious code in darrin-tea-archive npm...

EUVD-2025-82163

Malicious code in dorsey-tea-archive npm...

EUVD-2025-81889

Malicious code in flores-tea-archive npm...

EUVD-2025-81865

Malicious code in francesca-tea-archive npm...

EUVD-2025-81807

Malicious code in gerald-tea-archive npm...

MAL-2025-99725 Malicious code in ayala-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7438732a1417e4fa58968765ec3723d623c31bef66dd5e0f6e35be036d159a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100573 Malicious code in clark-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea19685a16fcc4a79d2d300a82c9eace9e35fb566f306b7156a0a0324a93c010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100630 Malicious code in cochran-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef25c5f848314f4c87933e4ec32be85e920f11a2f28253cbf523ce44621e5d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101214 Malicious code in darrin-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc7637187393445a0cb8e62d9563a1333e7c216c3b5a92c3b8453599cb8b7c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100506 Malicious code in cisneros-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9530754bbbb0cbabd13220281dc678c27be3e491fbe77ff8229bfa61e951142d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ayala-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7438732a1417e4fa58968765ec3723d623c31bef66dd5e0f6e35be036d159a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barber-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae3f51cfe820aa34837889ac1a818cf4bd58a176bde26c4579913d4519b5ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flores-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c43b085da987040e3e9e1235e4778c0fbdd847479d7d22051524b512a0d3374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Amazon Linux 2 : oci-add-hooks, --advisory ALAS2ECS-2025-080 (ALASECS-2025-080)

The version of oci-add-hooks installed on the remote host is prior to 0-0.5.20200504git325a340. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2025-080 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values...

Advisory ROSA-SA-2025-3060

Software: bzip2 1.0.6 OS: ROSA Virtualization 2.1 unaffected versions = bzip2-1.0.6-28.rv3 affected versions bzip2-1.0.6-28.rv3 CVE-ID: CVE-2019-12900 BDU-ID: CVE-Crit: HIGH CVE-DESC.: A vulnerability in the BZ2decompress decompress.c function of the bzip2 data compression utility is related to...

ROS-20251110-02

A vulnerability in the 7-Zip file archiver is related to incorrect symbolic link detection before file access. before accessing a file. Exploitation of the vulnerability could allow an attacker to execute arbitrary code if a user opens a specially crafted ZIP archive. provided the user opens a...

Important: runc

Issue Overview: Placeholder CVE. Details forthcoming CVE-2025-31133 net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to b...

Important: libcap

Issue Overview: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed withi...