CLSA-2026-1785204345 TuxCare security update for karma (5 CVEs)

TuxCare rebuilt karma to address 5 CVEs. Fixed in 4.0.0-tuxcare.1...

Malicious code in wasat-buffer-karma-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab517f07a17bafd85f8d3108a9ecec9aabd164231fb17393495b08a4f786a465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120648

Malicious code in wasat-buffer-karma-library npm...

GHSA-7X7C-QM48-PQ9C Cross-site Scripting in karma

karma prior to version 6.3.14 contains a cross-site scripting vulnerability...