59 matches found
PYSEC-2026-645 instack-undercloud vulnerable to symlink attack on tmp files
A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploi...
EUVD-2025-117294
Malicious code in intense-turquoise-pike npm...
EUVD-2025-117063
Malicious code in steep-brown-pike npm...
EUVD-2025-74269
Malicious code in selectivepikefuchsia-11 npm...
EUVD-2025-79084
Malicious code in hostilepikez3n npm...
EUVD-2025-79005
Malicious code in inquisitivepikez3n npm...
MAL-2025-85818 Malicious code in gentle_pike_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afb0082e6d7f3ce15625140a49fd396e09265409be5d17febe4e00982d4156d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-55898
Malicious code in alternative-amethyst-pike npm...
EUVD-2025-53536
Malicious code in lesser-green-pike npm...
EUVD-2025-53273
Malicious code in mid-scarlet-pike npm...
Malicious code in raspy-rose-pike (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be52b69c6b12963c96579f0ad3e0799cd272a43f2b93ba4404251a685ea1e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in zealous-coffee-pike (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecef60967f4d7a48ff1eaf48ae4b9155c8c2354dc7a3505ad9790a4fa7a508d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52452
Malicious code in raspy-rose-pike npm...
Malicious code in fun-maroon-pike (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26af88761afc73e2ba0b04877773dc1a295394c637b216673c147f7880e3f104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lucky-plum-pike (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a12967ce28e73b2de6a84a8cfdc72a4df4dfdea4c4323be4a643a18c42ead7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-69239 Malicious code in lucky-plum-pike (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a12967ce28e73b2de6a84a8cfdc72a4df4dfdea4c4323be4a643a18c42ead7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-71763 Malicious code in zealous-coffee-pike (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecef60967f4d7a48ff1eaf48ae4b9155c8c2354dc7a3505ad9790a4fa7a508d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51898
Malicious code in special-gold-pike npm...