EUVD-2025-91085

Malicious code in indirectgalliformz3n npm...

MAL-2025-112014 Malicious code in indirect_warbler_scarlet-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8627c9e52b969ce498d00b9f3bcac65921a4f5f91f9017c41c66ecc1107a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74538

Malicious code in indirectwarblerscarlet-18 npm...

EUVD-2025-76570

Malicious code in indirectcapybara-apptea npm...

EUVD-2025-79030

Malicious code in indirectguppyz3n npm...

MAL-2025-104156 Malicious code in indirect_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 723a68db519bf451c41c6e03be6e0946287a462d0d5737d34f29ef1f40043edb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81567

Malicious code in indirectunicorndumbs npm...

EUVD-2025-81568

Malicious code in indirectsquirreldumbs npm...

EUVD-2025-63556

Malicious code in indirectlampreyz3n npm...

EUVD-2025-63558

Malicious code in indirectcockroachz3n npm...

EUVD-2025-63557

Malicious code in indirectfalconz3n npm...

EUVD-2025-85528

Malicious code in indirectswordtailz3n npm...

EUVD-2025-53784

Malicious code in indirect-yellow-sheep npm...

EUVD-2025-53786

Malicious code in indirect-aqua-planarian npm...

EUVD-2025-53785

Malicious code in indirect-turquoise-heron npm...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20558)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20558 advisory. 6.12.0-103.40.4.2.el10uek - x86/vmscape: Warn when STIBP is disabled with SMT Pawan Gupta Orabug: 38343659 - x86/bugs: Move cpubugssmtupdate down Pawan...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20559)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20559 advisory. 5.15.0-312.187.5.1 - x86/vmscape: Warn when STIBP is disabled with SMT Pawan Gupta Orabug: 38343660 - x86/bugs: Move cpubugssmtupdate down Pawan Gupta...

EUVD-2025-50001

Malicious code in indirectmosquitoz3n npm...

kernel: x86/vmscape: Add conditional IBPB mitigation

In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor like QEMU. Existing mitigations already protect kernel/KVM...

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...