MAL-2025-154086 Malicious code in cinta-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b26cd789c0a04fa24b7d5eddc717992876f53ee1c40a60fcbf56e2988963ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151100 Malicious code in abang-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465c66d4832576a1134959da896475f4085c4c92e0ef7253bfc1b6c87bed3ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad178ed6c069762e45a718918c8033ee39251635327660f9f6757d3f4753b893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165035 Malicious code in rival-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ef17468e670783fdd21a1cc3063467cd0fa89df38656a40b026e1d5d5276f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153702 Malicious code in billa-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35216c726e9958f9b8ba29e581c4ef8a0295a1c6c37a8c24a31c3e7134d398a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161941 Malicious code in nasrul-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e00c4cf6df8d16059a9dedd54462c6e901f3beae4100b27262f5f09f685c9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155144 Malicious code in fitra-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db112fd8af4a73fc4d906cfcfa9ee907358b0acb8faee9f10c6f2b97747bcf95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-94196

Malicious code in vina-martabak50-breki npm...

EUVD-2025-74590

Malicious code in handsomemandrillivory-56 npm...

EUVD-2025-74465

Malicious code in medievalthrushgray-55 npm...

EUVD-2025-69722

Malicious code in iwan-serimuka52-ruro npm...

EUVD-2025-72462

Malicious code in fowlgold-50 npm...

EUVD-2025-72153

Malicious code in molemoccasin-50 npm...

Malicious code in bayu-kacang50-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53df50eb20385f89912ef8d57b1e8e3b9ce6bc6fac1d8cdd200724ee297b74a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-sego50-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c83ca022712a4f3c5b1b39cf40a37490f45535e590ed4acc8ed10eed4c82284b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60499

Malicious code in budi-kolak50-sluey npm...

ClipBucket SQL注入漏洞

ClipBucket is an open source and freely downloadable PHP script from MacWarrior Open Source. It is used for sharing video sites. A SQL injection vulnerability exists in ClipBucket v5 versions 5.5.2 through 151 and earlier, which originates from a certified administrator with plugin management...

Apple patches 50 security flaws—update now

Apple has released security updates for iPhones, iPads, Macs, Apple Watches, Apple TVs, Safari, and Xcode, fixing nearly 50 security flaws. Some of these bugs could let cybercriminals see your private data, take control of parts of your device, or break key security protections. Installing these...

EUVD-2025-37372

Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the password parameter in the sub426EF8 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.51 CNF IBU extras update

An update for ibu components is available for Red Hat OpenShift Container Platform 4.16. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the extra ibu container...