MAL-2025-189693 Malicious code in string-container-benchmark-phi-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8eeddb7aaf4eb14b9f84cab9ef4d5c482fe254563dc9dfb921f8ee860c3b659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179376

Malicious code in decompress-simple-lambda-container-meta npm...

EUVD-2025-179591

Malicious code in container-encrypt-kappa-virtualize-old npm...

Malicious code in container-error-sanitize-authenticate-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 042b588b7a0bd526a19fddc01c4ae5cd6e61d211c4638993593e8dcd9857ff31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176396

Malicious code in short-easy-epsilon-beta-container npm...

EUVD-2025-177516

Malicious code in nu-interpret-container-grep-bad npm...

EUVD-2025-179593

Malicious code in container-async-awk-zeta-runtime npm...

EUVD-2025-179590

Malicious code in container-error-sanitize-authenticate-sigma npm...

EUVD-2025-175622

Malicious code in web-container-container-sigma-optimize npm...

EUVD-2025-180316

Malicious code in array-upsilon-decrypt-container-object npm...

EUVD-2025-180153

Malicious code in bad-alert-long-container-mu npm...

EUVD-2025-176752

Malicious code in refactor-socket-container-wind-sigma npm...

EUVD-2025-176182

Malicious code in string-container-benchmark-phi-cat npm...

Malicious code in container-encrypt-kappa-virtualize-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f797b4a9f89f991872b9512b2adfc5ff57180b4e3a26fdb86bc508e15a96a1b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179589

Malicious code in container-tree-signal-notify-permission npm...

PT-2025-46853

Name of the Vulnerable Software and Affected Versions Cisco Catalyst Center affected versions not specified Description A flaw exists in the REST API of Cisco Catalyst Center that could allow a remote attacker with valid credentials at least Observer role to execute arbitrary commands within a...

RHEL 10 : podman (RHSA-2025:21220)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:21220 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods...

SUSE SLES15 Security Update : podman (SUSE-SU-2025:4080-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4080-1 advisory. - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions bsc1252376 - CVE-2025-52565: Fixed...

SUSE SLES15 Security Update : podman (SUSE-SU-2025:4079-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4079-1 advisory. - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions bsc1252376 - CVE-2025-52565: Fixed...

ALSA-2025:21232 Important: container-tools:rhel8 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: runc: container escape via 'masked path' abuse due to mount race conditions CVE-2025-31133 runc: container escape with malicious config due to /dev/console mount and...