MAL-2025-184718 Malicious code in oloc-uyg-uhai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bcb456768dbb8142c30a0597bc579807b2894fa19af4ad5e14d725a0033a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-tailwindcss-nodejs-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29f2c221f11923d5f6b23ee57f3071b738e1689f470d3de977ae6470d6b4c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127684 Malicious code in joko-gorengan46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc4e5965adbca911f04f06d613485adc1043b7fbceda55a8dba6fa8b85acbc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108537 Malicious code in sensible_wolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36fba9d4ca2d6d39597eaf24979883eb5cbb2ef22e518e8d074932022ead4f2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103493 Malicious code in hadianto-kue92-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4803d1d938aba5cb876be1b8c970e5f55f9e3bec2209c256c878fc6ccb8a4e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental_magpie_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1cdae7529cbbebdedfd21006105d04c6da7f2baedcc23098f9fe32efb2f297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-papeda90-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe7f85e0e95857ff510317ac87665e8b2314173715a5d089cb92c3424481696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40971)

f2fs: remove clear SBINLINECRYPT flag in defaultoptions In f2fsremount, SBINLINECRYPT flag will be clear and re-set. If create new file or open file during this gap, these files will not use inlinecrypt. Worse case, it may lead to data corruption if wrappedkeyv0 is enable. This plugin only works...

Linux Distros Unpatched Vulnerability : CVE-2022-24106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Xpdf prior to 4.04, the DCT JPEG decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unkno...

UBUNTU-CVE-2024-56585

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix sleeping in atomic context for PREEMPTRT Commit bab1c299f3945ffe79 "LoongArch: Fix sleeping in atomic context in setuptlbhandler" changes the gfp flag from GFPKERNEL to GFPATOMIC for allocpagesnode. However, for...

CVE-2022-24106

In Xpdf prior to 4.04, the DCT JPEG decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc...

Multiple Bugzilla bug tracking system vulnerabilities

It's possible to change bug flag and, under rare condition to view private bugs by unprivileged user...