MAL-2025-87396 Malicious code in kresna-dradag29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4191dcdfb68b3da7d58aeaa384e7d99bbeceeee2d4d526de2e4fadff4a2824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77762 Malicious code in eka-gepuk21-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b351be6863a8dde8e8274c75dbf01b5340aed22748a9e0eda467d4fe97fef367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12868

New Site Server developed by CyberTutor has a Use of Client-Side Authentication vulnerability, allowing unauthenticated remote attackers to modify the frontend code to gain administrator privileges on the website...

Malicious code in wibowo-empal48-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac84ca535424060defd3b8401ff1c4c32944abc9ac72364638af054186c4309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74296 Malicious code in mahesa-miebogor52-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb20a0dd43fce24c1a4337d1793549ce970a5a0e99e44f4e2049dc6e97356116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53035

Malicious code in new-gray-bedbug npm...

EUVD-2025-53036

Malicious code in new-fuchsia-roadrunner npm...

MAL-2025-69611 Malicious code in new-beige-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c2979299d170e7364ac51ca44755b82b54e1a34a79bd44fc1694a38f9c9687d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new-beige-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c2979299d170e7364ac51ca44755b82b54e1a34a79bd44fc1694a38f9c9687d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53038

Malicious code in new-beige-horse npm...

EUVD-2025-53037

Malicious code in new-crimson-badger npm...

MAL-2025-69614 Malicious code in new-gray-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206a4a1d960185d2141085cb2301f0b575b9813557b966ad72619681f80bcd14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46575

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 142.0.7444.166 Chromium versions prior to 142.0.7444.162-1deb12u1 Debian bookworm Chromium versions prior to 142.0.7444.162-1deb13u1 Debian trixie Chromium versions prior to 142.0.7444.162-alt0.p11.1 Description...

Malicious code in quixotic_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e80e52ff4793676f441d01a4a1003cf612136ee133eb01ad4c226e3e3957e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-46172

Malicious code in newcarpz3n npm...

OPENSUSE-SU-2025:20035-1 Security update for micropython

This update for micropython fixes the following issues: Changes in micropython: - Build with mbedtls-3.6.5 instead of bundled 3.6.2 to fix CVE-2025-59438 Version 1.26.0: Added machine.I2CTarget for creating I2C target devices on multiple ports. New MCU support: STM32N6xx 800 MHz, ML accel &...

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20251105T184115 2025-11-05T18:41:15Z. jscPED-11136: Go CVE Numbering Authority IDs added or updated with aliases: GO-2025-3987 GHSA-fmjh-f678-cv3x GO-2025-3988 GHSA-wpwj-69cm-q9c5 GO-2025-3999 GHSA-3g72-chj4-2228...

CVE-2025-12868

New Site Server developed by CyberTutor has a Use of Client-Side Authentication vulnerability, allowing unauthenticated remote attackers to modify the frontend code to gain administrator privileges on the website...

EUVD-2025-41750

New Site Server developed by CyberTutor has a Use of Client-Side Authentication vulnerability, allowing unauthenticated remote attackers to modify the frontend code to gain administrator privileges on the website...

CVE-2025-12868 CyberTutor｜New Site Server - Use of Client-Side Authentication

New Site Server developed by CyberTutor has a Use of Client-Side Authentication vulnerability, allowing unauthenticated remote attackers to modify the frontend code to gain administrator privileges on the website...