MAL-2025-86088 Malicious code in golden_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 315597e86c1e6dd16a21077932ee2eab49ec586c169aa2327a3689919ea406a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappy_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2141908bdc5bab6babb1c688fd2b2ff212bda676e1615c8766f8a1674d1147d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in federal_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee5fa93ccbeb2374f35ee9f61a949e1c2d1e2850d4f4d3b3006a6b1e24133ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70642 Malicious code in single-tomato-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a403b53f912b2dacd56d45bc674a9c46f3862c982b05552eea1b7b06a5a34c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-esdoger72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e438db75dfddeb8b79b67355ac9a68fc5d78242c14a6c62a740899868e3914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65424 Malicious code in square_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a580d127e0fe9c998243e3b3c929726c8e89164b2c4e371c0e74205b4337e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65641 Malicious code in tomi-pecel42-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 717d6c1663216e06a7641f4c6266e9dcd578a51049224bac36b52f6496530821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chronic_gorilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c85591133b03938159f23ce3f79d496e66e69baa984c7405405b299f816a7713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11372

CVE-2025-11372 affects the LearnPress – WordPress LMS Plugin (WordPress) up to and including version 4.2.9.3. The root cause is missing capability checks on Admin Tools REST endpoints, with permission_callback set to __return_true, enabling unauthenticated attackers to perform destructive databas...

EUVD-2018-0878

Malware in sbrugna...

EUVD-2025-11236

Malicious code in bioql PyPI...

CVE-2025-59056

CVE-2025-59056 affects FreePBX versions 15 (15.0.0–15.0.37), 16 (16.0.0–16.0.40), and 17 (17.0.0–17.0.20). The root cause is that malicious connections to the Administrator Control Panel web interface can trigger the uninstall function for certain modules, which then drops the module databases wh...

Linux Distros Unpatched Vulnerability : CVE-2025-39766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: Make cakeenqueue return NETXMITCN when past bufferlimit The following setup can trigger a WARNING in htbactivate due to the condition:...

Linux Distros Unpatched Vulnerability : CVE-2025-39797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRMMSGALLOCSPI Netlink message, which triggers the kernel function xfrmallocspi...

SUSE CVE-2025-39797

In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRMMSGALLOCSPI Netlink message, which triggers the kernel function xfrmallocspi. This function is expected to ensure uniqueness of the Security...

SUSE CVE-2025-39766

In the Linux kernel, the following vulnerability has been resolved: net/sched: Make cakeenqueue return NETXMITCN when past bufferlimit The following setup can trigger a WARNING in htbactivate due to the condition: !cl-leaf.q-q.qlen tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb...

CVE-2025-39797 xfrm: Duplicate SPI Handling

In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRMMSGALLOCSPI Netlink message, which triggers the kernel function xfrmallocspi. This function is expected to ensure uniqueness of the Security...

CVE-2025-39797

CVE-2025-39797 concerns the Linux kernel xfrm duplicate SPI handling. The vulnerability arises when Strongswan triggers an XFRM_NETLINK_ALLOC_SPI request, enabling xfrm_alloc_spi() to return success for an SPI already in use, causing multiple inbound SAs to share the same SPI (distinguished only ...

CVE-2025-39766 net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit

In the Linux kernel, the following vulnerability has been resolved: net/sched: Make cakeenqueue return NETXMITCN when past bufferlimit The following setup can trigger a WARNING in htbactivate due to the condition: !cl-leaf.q-q.qlen tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb...

Malicious Package

Overview colorinal is a malicious package. This package is part of a multi-stage attack and its content was removed from the official package manager. The attack utilizes a seemingly harmless package to introduce a malicious dependency. The goal of this attack is to gain remote code execution on...