Malicious code in nudela-rahaf0fafheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd4ed4e2b36aa13b9071d0b6ca5b25bba6c79a4f22cbf8a9b1517898ac046cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (=1.1.6) potentially affected by unknown CVE via nudela-rahafheg-ga (=1.0.0)

nudela-rahafheg-ga NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahafheg-ga and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163828...

Malicious code in nudela-rahaffheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5514e3990d02c423f5c0d19f50e8dd656bae0002f7c659b988f3bcbdd176f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (=1.1.6) potentially affected by unknown CVE via nudela-rahaffheg-ga (=1.0.0)

nudela-rahaffheg-ga NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahaffheg-ga and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163827...

siddheshtea (=1.1.6) potentially affected by unknown CVE via nudela-rahafeg-ga (=1.0.0)

nudela-rahafeg-ga NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahafeg-ga and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163826...

Malicious code in nudela-rahaf0faheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856c4ccbb76699949bbb4ba01fbfe962e9adb6d3d1a453c81676b696267d0b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (=1.1.6) potentially affected by unknown CVE via nudela-aaff-ga (=1.0.0)

nudela-aaff-ga NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aaff-ga and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163704...

Malicious code in mantu-nadas-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e48efe7f4aed0741a41d83a15cc92670796734ac9479d0eedf999e6d7ce6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-aahff-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e39651a85b4ec7e68ec6cf539dbf1a3bf52c2a5dbfd8ad55ba1833e60e3508c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (=1.1.6) potentially affected by unknown CVE via nudela-rahfeg-ga (=1.0.0)

nudela-rahfeg-ga NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfeg-ga and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163837...

MAL-2025-163825 Malicious code in nudela-rahaf0fheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b63f9c60bcbdcd6ff5ee966e49382ff2416ea3e080511ebb3b84897d494b639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146454

Malicious code in verify-ayali-ga npm...

MAL-2025-163822 Malicious code in nudela-rahaf0fafheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd4ed4e2b36aa13b9071d0b6ca5b25bba6c79a4f22cbf8a9b1517898ac046cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170358 Malicious code in verify-ayali-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e95bdf4d9f01f6daf8d19a3fc7389e5cf3af53f614cd0e5b4aeedc3a4d1552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

OPENSUSE-SU-2025:15732-1 python-Scrapy-doc-2.13.3-2.1 on GA media

These are all security issues fixed in the python-Scrapy-doc-2.13.3-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15730-1 helm-3.19.1-1.1 on GA media

These are all security issues fixed in the helm-3.19.1-1.1 package on the GA media of openSUSE Tumbleweed...

regclient-0.10.0-1.1 on GA media (moderate)

regclient-0.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15723-1 Rating: moderate Cross-References: CVE-2025-47912 CVE-2025-58183 CVE-2025-58185 CVE-2025-58186 CVE-2025-58187 CVE-2025-58188 CVE-2025-58189 CVE-2025-61723 CVE-2025-9230 CVE-2025-9231 CVE-2025-9232 CVSS scores: CVE-2025-479...

OPENSUSE-SU-2025:15722-1 hauler-1.3.1-1.1 on GA media

These are all security issues fixed in the hauler-1.3.1-1.1 package on the GA media of openSUSE Tumbleweed...

opentofu-1.10.7-1.1 on GA media (moderate)

opentofu-1.10.7-1.1 on GA media Announcement ID: openSUSE-SU-2025:15711-1 Rating: moderate Cross-References: CVE-2025-58183 CVE-2025-58185 CVE-2025-58187 CVSS scores: CVE-2025-58183 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2025-58183 SUSE : 4.8...

python315-3.15.0~a1-1.1 on GA media (moderate)

python315-3.15.0a1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15713-1 Rating: moderate Cross-References: CVE-2011-3389 CVE-2011-4944 CVE-2012-0845 CVE-2012-1150 CVE-2013-1752 CVE-2013-4238 CVE-2014-2667 CVE-2014-4650 CVE-2019-20907 CVE-2019-5010 CVE-2019-9947 CVE-2020-10735 CVE-2020-15523...