MAL-2025-51956 Malicious code in gilang-empal50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6973ed0332e1568b6b044bd4c988bab3f7f567beaf80435cdb85c80da629cc The package gilang-empal50-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-51479 Malicious code in dewanto-kue27-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd1a634921848eeb8fcdbf185f9a95addedfb7d4c633e6b11f7331c4dcf9d87 The package dewanto-kue27-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in arif-mendut95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f999e41cb7706a236bad2112bd75bb2e32d6c6aaa79597e5ffafb74c8f4c7e0 The package arif-mendut95-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in tania-kolak12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191c58741e8e2ddb6a3349922a3c1f0bbde3b8a9fe05eb2089256f7bcd88c165 The package tania-kolak12-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in eko-kupang18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e16b486b1287475bd6552011a56e541d98eeb549bb7c4c3030379e85e55da8 The package eko-kupang18-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in cici-tiwul10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53cd5df4a238417782bfc49d585dcc785351f0eac1c7abeb0a3900a865d7bdcd The package cici-tiwul10-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in citra-keripik10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74b56de42d05c17503c196b4dc3e7b092f4876bb630efebac259290973cc803e The package citra-keripik10-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in fauzi-lontong83-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89806461f2135666e66f496599cb410373d60175912615afb059a4d3adc6fcd4 The package fauzi-lontong83-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in budi-lapis49-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3983a9f046a9c7e1e72b4760988c158347db488469ae1eb3a63e00782904bb9 The package budi-lapis49-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-50343 Malicious code in erwin-klipo25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c93e6f7046307a821cdd03cb3a5bea3dd095b29623c58b814e39fbefc6a59fc The package erwin-klipo25-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in citra-klanting72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d4d20d51db636603da12698ff2b59d588e8f9559742670e3eb9207501d664f The package citra-klanting72-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50435 Malicious code in fitri-gulai95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f06e698fc734ac75aae06895303ca5399771f28b0e51231eb576c0939fac384 The package fitri-gulai95-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-51555 Malicious code in dian-lapis33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 495ec1e20b94e367b114abb081bd484962a5e6c3e17a6e4643187695bd12d3db The package dian-lapis33-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

CVE-2025-55278

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...

SUSE SLED15: libopenjpeg1 / libopenjpeg1-32bit / openjpeg / openjpeg-devel / etc (SUSE-SU-2025:3946-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3946-1 advisory. - CVE-2023-39327: Fixed that malicious files can cause a large loop that continuously prints warning...

EUVD-2025-37960

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990550)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990550 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable will be a...

CVE-2025-55278

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...

CVE-2025-55278

CVE-2025-55278 affects HCL DevOps Loop. Concrete details across sources show improper authentication in the API authentication middleware, allowing tokens to be accepted without proper validation of expiration or cryptographic signature. Affected component is the API authentication layer; root ca...

CVE-2025-55278 HCL DevOps Loop is susceptible to an improper authentication vulnerability

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...