openSUSE 15 Security Update : cargo-packaging, rust-bindgen (SUSE-SU-2025:4091-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:4091-1 advisory. cargo-packaging was updated to version 1.3.0+0: - CVE-2025-58160: Fixed tracing log pollution in tracing-subscriber bsc1249012 Other fixes: - Prevent strippi...

Security update for cargo-packaging, rust-bindgen

This update for cargo-packaging and rust-bindgen fixes the following issues: cargo-packaging was updated to version 1.3.0+0: CVE-2025-58160: Fixed tracing log pollution in tracing-subscriber bsc1249012 Other fixes: Prevent stripping debug info bsc1222175 rust-bindgen was updated to 0.72.0. Patch...

SUSE-SU-2025:4091-1 Security update for cargo-packaging, rust-bindgen

This update for cargo-packaging and rust-bindgen fixes the following issues: cargo-packaging was updated to version 1.3.0+0: - CVE-2025-58160: Fixed tracing log pollution in tracing-subscriber bsc1249012 Other fixes: - Prevent stripping debug info bsc1222175 rust-bindgen was updated to 0.72.0...

MAL-2025-189358 Malicious code in saturnology-astroinformatics-release-it-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b3567225aede0b7578ed93233235ca67fe147bf5c5093c18d0dac200a90c12a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-juno-cypress-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d18c480ca87915de8b545c8543b1908769b9d71711027a718c1af31ffaa6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3cc400a1ab4865e023cbe8e56c3d0e291b3c41c00314ca104781f7a90313a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bbdb512a01d715798249bb47ad74c5735aefeabac8f0e210c4d6e8ac170a136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6271cbd7b3f0cf5a15ebf2765e398031d8a32e10b8f622725b3a31d887f2134e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-duvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018df8d6102a7f32dfe7a533656a19e1e97e1c6e69c71fb4fb8f05def8d39bad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157131 Malicious code in jurss-a1rea-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dd07db606223407df84b520328abf15563c909bf949d831d573b526c91a32e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-colors-aquarius-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 911081cb46abd2de21389ef7af5d7911dec4ce37cd1ff6eec6f1cd82585dcc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-spawn-server-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6ae84aa5b7fe85307aa839241cc7ad1bc03413134bad3133d229dd5cb63412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137801 Malicious code in vida-tempe52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475394238a040702da1ef1c899c4ee3ae110cff86a579a1b80a37fd471fd2163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135468 Malicious code in maman-pecel67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67edbb42548375e20f04504c3104a0b149ff8e822178df96f6b1153095e9d9eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-rendang95-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f43d9c2718e65663d25c2c078518717b296a0dda5e9e0d5c6b9e90ce56a2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124218 Malicious code in wawan-gorengan21-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c93aed90e90becb0e8d93c5165065271c3520c947ae946dbcb796812433922bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-13016

Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

MAL-2025-108892 Malicious code in social_porcupine_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d1b549204f1187a540a2390178794846e8c3dd51dff3d29401ad4fd8f35c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heavy_bobolink_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0dbe85c01db4fddecfc3f63b96e127fd70abe4f6951f47ee4c68d0796e0c7b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-4645

An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a...