978 matches found
Malicious code in bambang-mieayam63-sumpek (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc6954c6638cef69669217e4b80e368a7e24199135c3ba3793e1de7a7de5a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in irma-klanting54-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3160f6cd07059d082b25f0896ea8ff190d6ed07d06ff5ccf3d334ec255047374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-65188 Malicious code in rudi-lapis66-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92eaefd9bc9d9e5c346648ec7f75f04f85e986052096c62995f9df0b97fef372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hanafi-gepuk34-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b45fa239a9da1306204429c94cb63e70b4b2ba0009e36b278c0a5e53acc754a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in modern_wren_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec2f4d3e04db45db10bc49588c09d735874859f09a801280b8b6d6308e99e926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-59571 Malicious code in xaver-rendang91-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945bfc0a3d0a577547255ae040846affc0f0d155389d81d95227522f08dba1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-54788 Malicious code in sari-gaplek93-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba06a2c395e8d180eff7bbd44ae1cbe85d779946fdcaf467a43fde1c31855ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in maman-sate70-kyuki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64cd89f88c631e4c5f1116845d63bdd568099cddd1b452048a74527ff0773554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-52489 Malicious code in tuti-klentik7-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eb7261a6bf959b6b1ce95983ae88404a2ece42deb94a4e820db185384b3df04 The package tuti-klentik7-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: ksmbd: The issue of a null pointer dereference error in generateencryptionkey has been fixed. If a client sends two session setups with KRB5 authentication to ksmbd, a null pointer dereference error in generateencryptionkey can...
The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align (formerly AgileCraft) stems from deficiencies in the authorization process, allowing unauthorized users to gain access to protected information.
The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align formerly AgileCraft is related to deficiencies in the authorization process during the execution of the “Generate Team Sprints” action. Exploiting this vulnerability could...
Malicious Package
Overview cooler-loans-api-generate is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in cooler-loans-api-generate (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14591c09547262270253b5ec14b726249679f72985f6e450ba0cf5198ee216af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-35840
Malicious code in cooler-loans-api-generate npm...
EUVD-2025-35771
Malicious code in generate-delta-worker npm...
Malicious code in generate-delta-worker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad06efd44d16d4917dd43ae0c9464faaffb8c5f2db9f3b8b3a94a36de4722ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview generate-delta-worker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-48565 Malicious code in generate-delta-worker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad06efd44d16d4917dd43ae0c9464faaffb8c5f2db9f3b8b3a94a36de4722ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Fedora 42 : complyctl (2025-ff84d4bc22)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ff84d4bc22 advisory. First minor release of complyctl - a new command line Interface for Fedora compliance assessment. It features a decoupled plug-in architecture for flexibilit...