CVE-2025-68121

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the...

Malicious code in current_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edef0c6d6e26229706ac2f3a0e34cee8fd85d29ace11aadb402692b6b7daa3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...