siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahafeg-ga (1.0.0)

nudela-rahafeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahafeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163826...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aaff-ga (1.0.0)

nudela-aaff-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aaff-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163704...

Malicious code in nudela-rahaf0faheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856c4ccbb76699949bbb4ba01fbfe962e9adb6d3d1a453c81676b696267d0b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170358 Malicious code in verify-ayali-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e95bdf4d9f01f6daf8d19a3fc7389e5cf3af53f614cd0e5b4aeedc3a4d1552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mantu-nadas-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e48efe7f4aed0741a41d83a15cc92670796734ac9479d0eedf999e6d7ce6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahfeg-ga (1.0.0)

nudela-rahfeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163837...

Malicious code in nudela-rahaf0fafheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd4ed4e2b36aa13b9071d0b6ca5b25bba6c79a4f22cbf8a9b1517898ac046cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-aahff-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e39651a85b4ec7e68ec6cf539dbf1a3bf52c2a5dbfd8ad55ba1833e60e3508c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163825 Malicious code in nudela-rahaf0fheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b63f9c60bcbdcd6ff5ee966e49382ff2416ea3e080511ebb3b84897d494b639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

OPENSUSE-SU-2025:15732-1 python-Scrapy-doc-2.13.3-2.1 on GA media

These are all security issues fixed in the python-Scrapy-doc-2.13.3-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15730-1 helm-3.19.1-1.1 on GA media

These are all security issues fixed in the helm-3.19.1-1.1 package on the GA media of openSUSE Tumbleweed...

regclient-0.10.0-1.1 on GA media (moderate)

regclient-0.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15723-1 Rating: moderate Cross-References: CVE-2025-47912 CVE-2025-58183 CVE-2025-58185 CVE-2025-58186 CVE-2025-58187 CVE-2025-58188 CVE-2025-58189 CVE-2025-61723 CVE-2025-9230 CVE-2025-9231 CVE-2025-9232 CVSS scores: CVE-2025-479...

OPENSUSE-SU-2025:15722-1 hauler-1.3.1-1.1 on GA media

These are all security issues fixed in the hauler-1.3.1-1.1 package on the GA media of openSUSE Tumbleweed...

python315-3.15.0~a1-1.1 on GA media (moderate)

python315-3.15.0a1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15713-1 Rating: moderate Cross-References: CVE-2011-3389 CVE-2011-4944 CVE-2012-0845 CVE-2012-1150 CVE-2013-1752 CVE-2013-4238 CVE-2014-2667 CVE-2014-4650 CVE-2019-20907 CVE-2019-5010 CVE-2019-9947 CVE-2020-10735 CVE-2020-15523...

opentofu-1.10.7-1.1 on GA media (moderate)

opentofu-1.10.7-1.1 on GA media Announcement ID: openSUSE-SU-2025:15711-1 Rating: moderate Cross-References: CVE-2025-58183 CVE-2025-58185 CVE-2025-58187 CVSS scores: CVE-2025-58183 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2025-58183 SUSE : 4.8...

govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media Announcement ID: openSUSE-SU-2025:15710-1 Rating: moderate Cross-References: CVE-2016-11063 CVE-2016-11066 CVE-2016-11067 CVE-2016-11068 CVE-2016-11069 CVE-2016-11070 CVE-2016-11071 CVE-2016-11072 CVE-2016-11073 CVE-2016-11074 CVE-2016-11075...

OPENSUSE-SU-2025:15717-1 tomcat10-10.1.48-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.48-1.1 package on the GA media of openSUSE Tumbleweed...

erlang-28.1.1-1.1 on GA media (moderate)

erlang-28.1.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15706-1 Rating: moderate Cross-References: CVE-2016-1000107 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the erlang-28.1.1-1....

OPENSUSE-SU-2025:15707-1 ghostscript-10.06.0-2.1 on GA media

These are all security issues fixed in the ghostscript-10.06.0-2.1 package on the GA media of openSUSE Tumbleweed...

kubecolor-0.5.3-1.1 on GA media (moderate)

kubecolor-0.5.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15703-1 Rating: moderate Cross-References: CVE-2025-47912 CVE-2025-58185 CVSS scores: CVE-2025-47912 SUSE : 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2025-47912 SUSE : 8.8...