Malicious code in cici-kupat54-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb459b54723823225e2a1136546d59790c84d24a3119672fa5fee58b25d8d31 The package cici-kupat54-wekto was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

EUVD-2021-24177

Malware in sbrugna...

EUVD-2021-24181

Malware in sbrugna...

EUVD-2021-16081

Malware in sbrugna...

EUVD-2021-24180

Malware in sbrugna...

EUVD-2021-19565

Malware in sbrugna...

EUVD-2019-0553

Malware in sbrugna...

EUVD-2018-12716

Malware in sbrugna...

EUVD-2024-0495

Malicious code in bioql PyPI...

EUVD-2024-38191

Malicious code in bioql PyPI...

EUVD-2024-54644

Malicious code in bioql PyPI...

EUVD-2023-33557

Malicious code in bioql PyPI...

EUVD-2022-1916

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2018-20147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In WordPress before 4.9.9 and 5.x before 5.0.1, authors could modify metadata to bypass intended restrictions on deleting files. CVE-2018-20147 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2025-4330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You...

BIT-LIBPYTHON-2024-12718 Bypass extraction filter to modify file metadata outside extraction directory

Allows modifying some file metadata e.g. last modified with filter="data" or file permissions chmod with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or...

Linux Distros Unpatched Vulnerability : CVE-2024-12718

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allows modifying some file metadata e.g. last modified with filter=data or file permissions chmod with filter=tar of files outside the extraction directory. You...

RockyLinux 8 : python3.12 (RLSA-2025:10031)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:10031 advisory. cpython: Tarfile extracts filtered members when errorlevel=0 CVE-2025-4435 cpython: Bypass extraction filter to modify file metadata outside extraction...

CBL Mariner 2.0 Security Update: python3 (CVE-2025-4138)

The version of python3 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4138 advisory. - Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination...

K000152599: Python tarfile vulnerability CVE-2024-12718

Security Advisory Description Allows modifying some file metadata e.g. last modified with filter="data" or file permissions chmod with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using...