Malicious code in item-atim-kubusui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b6ef5c8ca17d14ec9ce8f81cb76b35b6e4d4849a2010b80421dc275572b264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-doa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f126d6719843ce56bf6225716575b12c18f0a6beaae334ba94807c8e954d51a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubuskuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ea70a458b569612e064a6229c713056dd5558289a5962ba08f9ad910f2cd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubuskiuabika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5dbf06c3c308f9b1f58f5a8ac6d7f97e5692e3c3b93e0102340f957d801486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kujaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a515105704b364390c847f65133cacfa3f2bcf38b7bf048deb2b0932d07ad753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-kubussiduzika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87599b4905db0ed922fc5e79b53e847304adedec7a88e06fcd45c3390d9a317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183100 Malicious code in item-ati-kuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35784702cbe24cb0362d360a9bb26e75bf96e72be1d019edf5a0e063e79817d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183153 Malicious code in item-atim-kuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3010ae6fa5ae0e9b92c452f4db374e18b87543516641377fc8adf8029ae3d3b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183163 Malicious code in item-atm-kujolinoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33cbe604ba43caac2e5da0dcb19f172982139e92122065996f9ea58d15c392a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Linux Distros Unpatched Vulnerability : CVE-2025-40171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-fc: move lsop put work to nvmetfclsreqop It's possible for more than one async command to be in flight from nvmetfcsendlsreq. For each command, a tgtport...

[SECURITY] Fedora 43 Update: python-cloudpickle-3.1.2-1.fc43

cloudpickle makes it possible to serialize Python constructs not supported by the default pickle module from the Python standard library. cloudpickle is especially useful for cluster computing where Python expressions are shipped over the network to execute on remote hosts, possibly close to the...

CVE-2025-64140

Jenkins Azure CLI Plugin 0.9 and earlier does not restrict which commands it executes on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary shell commands...

CLSA-2025-1762537123 cups: Fix of CVE-2024-35235

CVE-2024-35235: patch arbitrary chmod vulnerability in cupsd process when starting server with symbolic link Listen configuration item...

Onlook 安全漏洞

Onlook is a source code visual editing tool from the Onlook open source. A security vulnerability exists in Onlook version 0.2.32, which stems from the API not validating the ownership or membership of the current authenticated user for the requested item ID, potentially resulting in compromised...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fixed a NULL pointer dereferencing in corescsi3decodespeciport. The function corescsi3decodespeciport, during its error code path, corescsi3lunaclundependitem, passing the destsedeve pointer, which may be NULL. This...

Missing Authorization

Overview com.liferay:com.liferay.blogs.item.selector.web is a Liferay Blogs Item Selector Web Affected versions of this package are vulnerable to Missing Authorization via insufficient permission checks in the BlogsItemSelectorViewDisplayContext class, when handling image access. An attacker can...

Cross-site Scripting (XSS)

Overview com.liferay:com.liferay.dynamic.data.mapping.item.selector.web is a Liferay Dynamic Data Mapping Item Selector Web Affected versions of this package are vulnerable to Cross-site Scripting XSS via the select structure page when processing user input in the First Name, Middle Name, or Last...

btrfs: do not assert we found block group item when creating free space tree

...

SUSE CVE-2025-40100

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not assert we found block group item when creating free space tree Currently, when building a free space tree at populatefreespacetree, if we are not using the block group tree feature, we always expect to find block...

Malicious code in @item-shop-data/client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3931756a8f0da8b385e1c2b974c51fef803ddf8c0c6cb84ed0dacf3b3e6c1bd The package @item-shop-data/client was found to contain malicious code...