EUVD-2025-50886

Malicious code in zealous-coffee-pike npm...

EUVD-2025-53903

Malicious code in hushed-yellow-pike npm...

EUVD-2025-52452

Malicious code in raspy-rose-pike npm...

Malicious code in raspy-rose-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be52b69c6b12963c96579f0ad3e0799cd272a43f2b93ba4404251a685ea1e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51080

Malicious code in whole-peach-pike npm...

EUVD-2025-52952

Malicious code in odd-purple-pike npm...

Malicious code in lucky-plum-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a12967ce28e73b2de6a84a8cfdc72a4df4dfdea4c4323be4a643a18c42ead7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53410

Malicious code in lucky-plum-pike npm...

EUVD-2025-51817

Malicious code in statutory-lavender-pike npm...

MAL-2025-71763 Malicious code in zealous-coffee-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecef60967f4d7a48ff1eaf48ae4b9155c8c2354dc7a3505ad9790a4fa7a508d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69239 Malicious code in lucky-plum-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a12967ce28e73b2de6a84a8cfdc72a4df4dfdea4c4323be4a643a18c42ead7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obliged_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc14b946398b1742fb4d43e2ab1176f74e51729df7da104e54a6d5d07baae70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-59068

Malicious code in isolatedpikez3n npm...

MAL-2025-58094 Malicious code in orthodox_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d455e177b0666371018a0827bae7f3a6a16ea575cacd7d1ed6c0d76e93ad1eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2006-4034

Malware in sbrugna...

Malicious code in far-gray-pike (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9626 Malicious code in far-gray-pike (npm)

--- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2006-4041

SQL injection vulnerability in Pike before 7.6.86, when using a Postgres database server, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors...

OpenStack Nova DoS by rebuilding the same instance with a new image multiple times

An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was...

GHSA-53WM-97P6-582F instack-undercloud vulnerable to symlink attack on tmp files

A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploi...