OPENSUSE-SU-2026:10024-1 libsoup-2_4-1-2.74.3-13.1 on GA media

These are all security issues fixed in the libsoup-24-1-2.74.3-13.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10003-1 python311-marshmallow-3.26.2-1.1 on GA media

These are all security issues fixed in the python311-marshmallow-3.26.2-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-192939 Malicious code in magic-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dea39f25cc72cc9ab080d6f35ef68c9a061a8df5fe184194798109dad36faa5 The package magic-poc was found to contain malicious code. Source: ghsa-malware 89ec0cb0d10ed48f38fd79d080a40f46510b46211da23e64a2c72d9b053cb73b Any...

OPENSUSE-SU-2025:15841-1 zk-0.15.2-1.1 on GA media

These are all security issues fixed in the zk-0.15.2-1.1 package on the GA media of openSUSE Tumbleweed...

CLSA-2025-1764772111 jackson-modules-base: Fix of CVE-2025-52999

Rebuilt with the CVE-2025-52999: fixed jackson-core version - Fixed build: replaced missing packages with a patch for PackageVersion...

CLSA-2025-1764771605 jackson-jaxrs-providers: Fix of CVE-2025-52999

Rebuilt with the CVE-2025-52999: fixed jackson-core version - Fixed build: replaced missing packages with a patch for PackageVersion...

MAL-2025-190600 Malicious code in optly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0772e230f188de88a82becfa6493f2c39c36e63290339595308366a84154a56 The package optly was found to contain malicious code. Source: ossf-package-analysis e70192025ea0e8c030d0adbe15f6c3272271f3b25cb13eedfb8136da48c9a29a...

MAL-2025-190500 Malicious code in com.mixpanel.unity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a617ed7539b6703818676ef051a6c12331b0e014026d1b56fb7d72775d7ad5a1 The package com.mixpanel.unity was found to contain malicious code. Source: ossf-package-analysis...

OPENSUSE-SU-2025:15737-1 teleport-17.7.10-1.1 on GA media

These are all security issues fixed in the teleport-17.7.10-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in vuepress-update-canopus-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c0ba2e936fb4ba21ad01bbf840125a863fbb501192f3e88e43e962473e8fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andromeda-webpack-nodejs-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d388bde9d4e260b9a344967865578a95635996ada4aee337f32116385eb627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astrobiology-andromeda-lightyear-astrometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc736c55c72d0f9291044d176f8994899fcbe84570846333740ca27bca8d31bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-odin-redis-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb2c6e623c7d9e32f8ec2d22c12a773727da425828e927da38a134bd8f8e17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petrology-prettier-sirius-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5fb6e174c1f7bd6b8a627dd695290aa83eb2a9dd2af94c2c5856325018e705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190469 Malicious code in zephyr-prettier-sequelize-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f33cc7656a725e03d077a064f3e7e9e32e71a10d7fff8cb27b483865200522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190188 Malicious code in vuepress-apollo-kuiperbelt-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4173383d800b1607f50cc0cf3319b90bfd620b0d00175aab6683c57b5f9471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187969 Malicious code in meissa-gemini-jupiter-heliophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089faaaac3c0796dcadd5706ba9d72fecc451884fd1cf61f39081991d2cb04c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189317 Malicious code in sagitta-polaris-configstore-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a105ecd8ce1e73138202d04dda63b4869c363dc694a29aa66527412831360b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189479 Malicious code in short-easy-epsilon-beta-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9aad4a5d3cc9d3b05ef3126a8c7377929098bfa3b444d80823ec298620e501f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186376 Malicious code in cron-tree-query-unix-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f34a183643dd8952a10e6cfa7eadbc3debad2f90787679d22a85f961c815e5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...