UBUNTU-CVE-2026-53525

WeeChat Wee Enhanced Environment for Chat is a free chat client. In versions 0.3.1 through 4.9.0, the WeeChat relay authentication uses non-constant-time string comparison functions weechatstrcasecmp and strcmp to verify password hashes and plaintext passwords. An attacker can exploit timing...

MAL-2025-147195 Malicious code in relay-auth-cassini-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf7a75cf1af94a450e995779c3a4f00f61ffd14df9177e7fd4aea774699e5e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122727

Malicious code in relay-auth-cassini-winston npm...