RLSA-2026:0700 Moderate: transfig security update

The transfig utility creates a makefile which translates FIG created by xfig or PIC figures into a specified LaTeX graphics language for example, PostScriptTM. Transfig is used to create TeX documents which are portable i.e., they can be printed in a wide variety of environments. Install transfig...

transfig security update

An update is available for transfig. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The transfig utility creates a makefile which translates FIG created by xfig...

EUVD-2025-134384

Malicious code in kisut-fig-a npm...

EUVD-2025-134372

Malicious code in kisut-fig-dn npm...

EUVD-2025-134378

Malicious code in kisut-fig-dikanam npm...

Malicious code in kisut-fig-dufdyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c767d1bdbc2bda51ded391bc18977c7f57704e9c2ae2e1064a60df9ae4be7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-fig-dikanamufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddaa2a890d35e29260bfe534932f8b860140717585adf1b6acd57aa345978905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-fig-dfyn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e18ec0e713b98f1631dc420defb056b0e3de1224e8b72e78a00f56de127921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-fig-dianam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f4c4fb6e6c0fc095f4317492eeacee82fb984e09d14c2078769324d16a0063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134383

Malicious code in kisut-fig-a npm...

EUVD-2025-134381

Malicious code in kisut-fig-dfyn npm...

EUVD-2025-134380

Malicious code in kisut-fig-dianam npm...

EUVD-2025-134375

Malicious code in kisut-fig-dikanamufami npm...

EUVD-2025-134376

Malicious code in kisut-fig-dikanamufai npm...

EUVD-2025-134373

Malicious code in kisut-fig-dinam npm...

EUVD-2025-134370

Malicious code in kisut-fig-dnam npm...

EUVD-2025-134369

Malicious code in kisut-fig-dnm npm...

EUVD-2025-134368

Malicious code in kisut-fig-dnm npm...

EUVD-2025-134366

Malicious code in kisut-fig-dufyn npm...

Malicious code in kisut-fig-dufyn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389dea6b306170a5fc4fd88b4e68f7d303f5d2bf42be5ea81d749a07cc4e9f19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...