679 matches found
MAL-2025-67884 Malicious code in dry-rose-iguana (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a486998b80948e010817fdc7e3c5ad31fb7acfe6695ec6ed3eb6a13b896d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-69824 Malicious code in partial-rose-yak (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 343240d70b59fc98ee209cb24eeffe9594148141d4ed1e07499c382b7020d268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-67005 Malicious code in bloody-rose-constrictor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da676bcf52118dc04dd94274fe69502a840fa95fd2da3dee1299438027c6f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-67688 Malicious code in definite-rose-felidae (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068badb64fdc14214c5588d9edb8e9a9c9523b416af7dea06f3229a91979d569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-71221 Malicious code in unable-rose-whale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7298374d8544f5faf21010e36db809189e2306a9b9330b323ee85be402c78776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-70607 Malicious code in shrill-rose-opossum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701ebe54e2710a358995bcc0ac3b2940c4729788bd2dae185030e8f8256b9f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-67624 Malicious code in dark-rose-shrew (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110924f4ad37517588794a92f878d8c275c72159f5967ccb634e6cae118f9478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-71780 Malicious code in zesty-rose-salamander (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb3413ebe94bb5df870e24d8eb4e8ad1bff8d5ab21c92aeb9b2f60fb147c087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-69822 Malicious code in partial-rose-eel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27d0c49db0a7cdcb061529dfb3162ea69b486e060988006b840dff8ff846e2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-70196 Malicious code in raspy-rose-flea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4d4c77a8c91f0d229d4fba71f457026993679a350298256f2c5255a37936c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-69080 Malicious code in leading-rose-heron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae151318b61013eff978e6f53c74a713cef756b48d1ed8fd045f5951018d072a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-67597 Malicious code in curved-rose-finch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4733f035a76f3a72778f0c4e738aff55017ba75200e0fd98d684ab72d0fb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sympathetic-rose-peacock (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233bd7f698af77d5ef537c312bdbb86fd34cc7e3e25071036e954f329904e99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-68271 Malicious code in fat-rose-parrotfish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89212a1c82e9410e0cfe3c3649f02f059d2628ace716b771bc7002b8ddd5191a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51188
Malicious code in visible-rose-camel npm...
EUVD-2025-56079
Malicious code in able-rose-caribou npm...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-988696)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988696 advisory. In the Linux kernel, the following vulnerability has been resolved: rose: Fix NULL pointer dereference in rosesendframe The syzkaller reported an issue: KASAN:...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990138)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990138 advisory. In the Linux kernel, the following vulnerability has been resolved: rose: Fix NULL pointer dereference in rosesendframe The syzkaller reported an issue: KASAN:...
Siemens SIMATIC Devices Integer Overflow or Wraparound (CVE-2025-21711)
net/rose: prevent integer overflows in rosesetsockopt This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503507; scriptversion"1.2";...