MAL-2025-79336 Malicious code in kiki-dodol3-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5400c58ce1b7633e74cfa5d83e3abc5d7189a7c0f732b537ad1d9aa12ccce45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

openstack-heat-templates: setting gpgcheck=0 for signed packages

OpenStack Heat Templates heat-templates, as used in Red Hat Enterprise Linux OpenStack Platform 4.0, sets gpgcheck to 0 for certain templates, which disables GPG signature checking on downloaded packages and allows man-in-the-middle attackers to install arbitrary packages via unspecified vectors...