GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: gatekeeper, kubernetes-dashboard-auth, pulumi-language-yaml, cloudprober, helm, cert-manager-cmctl, redka, grafana-rollout-operator, keda, telegraf, crossplane-provider-aws-cloudformation, sriov-network-device-plugin, temporal-server, argo-events,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: gatekeeper, rancher-system-upgrade-controller, telegraf, kubelet-csr-approver, timoni, newrelic-infra-operator, crossplane-provider-aws-cloudwatchlogs, opensearch-k8s-operator, kube-rbac-proxy, crossplane-provider-aws-kinesis, bank-vaults, rancher-webhook,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: eks-distro-fips, beats-fips, crossplane-provider-aws-elasticache, k8ssandra-client-fips, prometheus-fips, apache-exporter, consul-fips, yunikorn-k8shim-fips, terraform-provider-pagerduty, contour-fips, livekit-cli, crossplane-provider-aws-dynamodb-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: eks-distro-fips, beats-fips, container-object-storage-interface-fips, nri-discovery-kubernetes-fips, crossplane-provider-aws-elasticache, k8ssandra-client-fips, prometheus-fips, ipfs-cluster-fips, nfpm, apache-exporter, consul-fips, litefs, yunikorn-k8shim-fips,...

EUVD-2023-60103

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in sesenclosuredataprocess A fix for: BUG: KASAN: slab-out-of-bounds in sesenclosuredataprocess+0x949/0xe30 ses Read of size 1 at addr ffff88a1b043a451 by task systemd-udevd/3271 Checking after a...

Malicious code in sonic-kas-fagiufafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8010dc26ed34565dc89ea8cea1ae161e32b809f95c5bcfefa761b2ef4ec5412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-faga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839911df5eee7c783c483105bb63bae889a776bb393bcf77c80e808af55216cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagiuffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3fcd509908152c6aa364118f359e5c46070a2383e4cefe02fcd6436bc3ed2bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c26c50384b65dd066fe150918ea95622b310dfe095a7d2beeeb21ed057aa5811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ahagafuji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb21f89fa5d9de34dd481ce083356a5718406984696261589c4b540e82ac2615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ahagafujiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845b292470eafc13b0b4b09fc30b37e4bdd96c5beb6974b69ff9f02a14dfec58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-aagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd879d51f7729decd647411d9487605e60a885059e38ba5be96aafdb0d7fa67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12ce88c0c9964c4f59e74053f3602f9a409deaaae289b1b9a8252b760d67137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ahagauji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3368d00443e2132d1d94f66cf24dd43e0d10d98b115e38bee6ce1662578e736e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184950 Malicious code in sonic-kas-fagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87a26921ec3a2ab556ee7ddfe66b5b407c1b8f7aeed8eecbfc79c54a4adeebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184934 Malicious code in sonic-kas-aagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd879d51f7729decd647411d9487605e60a885059e38ba5be96aafdb0d7fa67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184951 Malicious code in sonic-kas-fagiufafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8010dc26ed34565dc89ea8cea1ae161e32b809f95c5bcfefa761b2ef4ec5412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87a26921ec3a2ab556ee7ddfe66b5b407c1b8f7aeed8eecbfc79c54a4adeebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184935 Malicious code in sonic-kas-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496831f1173e1f891085affbaf362424dc416d7b9a02fd4544e117f722bcdeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-minuday-kas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af97f2085ef4f3bd1c37ec2e11539e6fa1f3b59ad59d4d2a718c3538795a2db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...