EUVD-2025-179694

Malicious code in cluster-tool-quasarjet-meteor npm...

EUVD-2025-178460

Malicious code in ichnology-ursa-petrology-cluster npm...

EUVD-2025-180192

Malicious code in await-async-cluster-terser-webpack-plugin npm...

Malicious code in hugo-plutology-comet-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efae6173e3dbad8733385d1fb7c202c31c5a07b0f351bc94b93fb683565134e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179425

Malicious code in cz-conventional-changelog-sirius-cluster-tectonophysics npm...

EUVD-2025-179116

Malicious code in enum-new-encode-tree-cluster npm...

EUVD-2025-179696

Malicious code in cluster-sirius-promise-neutrino npm...

Malicious code in bootstrap-cluster-fornax-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68c8b328a4fdb50634ae09eb0a5a69120d6aedc072cba9562ccade41a2e33e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179704

Malicious code in cluster-concurrently-wolf-astrometry npm...

EUVD-2025-175892

Malicious code in transport-betelgeuse-cluster-juno npm...

EUVD-2025-176446

Malicious code in selenium-cluster-framework-eleventy npm...

EUVD-2025-179843

Malicious code in catch-float-cluster-assert-load npm...

EUVD-2025-175547

Malicious code in winston-boson-publish-cluster npm...

Malicious code in selenium-cluster-framework-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945e3261b632eb6a730ff1c7db5709620010f8bf20bb163023ccd934c64a084f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178039

Malicious code in log-byte-cluster-uglify-error npm...

EUVD-2025-179693

Malicious code in cluster-volcanology-eslint-plugin-singularity npm...

Virtuozzo Hybrid Infrastructure 7.1 Hotfix 2 (7.1.0-190)

This update provides important stability fixes. Vulnerability id: VSTOR-115013 A stability fix for libvirt. Vulnerability id: VSTOR-115455 Failed to add a node to the compute cluster. Vulnerability id: VSTOR-118628 Fixed missing FUA write processing on dm-qcow2 and dm-ploop devices...

Virtuozzo Hybrid Infrastructure 7.0 Hotfix 5 (7.0.0-273)

This update provides important stability fixes. Vulnerability id: VSTOR-115013 A stability fix for libvirt. Vulnerability id: VSTOR-115455 Failed to add a node to the compute cluster. Vulnerability id: VSTOR-118628 Fixed missing FUA write processing on dm-qcow2 and dm-ploop devices...

PT-2025-46903

Name of the Vulnerable Software and Affected Versions Typebot versions prior to 3.13.1 Description Typebot is an open-source chatbot builder. A Server-Side Request Forgery SSRF issue exists in the Typebot webhook block HTTP Request component functionality. This allows authenticated users to make...

Observability Operator is vulnerable to Incorrect Privilege Assignment through its Custom Resource MonitorStack

A flaw was found in the Observability Operator. The Operator creates a ServiceAccount with ClusterRole upon deployment of the Namespace-Scoped Custom Resource MonitorStack. This issue allows an adversarial Kubernetes Account with only namespaced-level roles, for example, a tenant controlling a...