Malicious code in silent_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414c7d39414749492777515ccab2583b766a507b93307e7762ee68fd1d77a0f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-66762

Malicious code in silentelephantz3n npm...

EUVD-2025-66761

Malicious code in silentwildcatz3n npm...

EUVD-2025-66763

Malicious code in silentalbatrossz3n npm...

EUVD-2025-52032

Malicious code in silent-purple-trout npm...

EUVD-2025-52031

Malicious code in silent-turquoise-hippopotamus npm...

Malicious code in silent-coffee-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25ff3223a62a54a89e678df6f46dd92fccd39ae7d1d69ff9ee5a79efccccd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52033

Malicious code in silent-coffee-chameleon npm...

Malicious code in silent-yellow-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8212fa9469c7d9e47bb081f002dd791bb63353c9c66be7e9b0177a747e71205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52029

Malicious code in silent-yellow-crab npm...

EUVD-2025-52030

Malicious code in silent-violet-aphid npm...

MAL-2025-70620 Malicious code in silent-yellow-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8212fa9469c7d9e47bb081f002dd791bb63353c9c66be7e9b0177a747e71205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64529

SpiceDB prior to v1.45.2 is affected when the exclusion operator is used and a per-call payload is large due to --write-relationships-max-updates-per-call > 6500. In this scenario, WriteRelationships can return success for a failed operation and produce incorrect permission results if the affe...

curl: Silent TLS Trust Model Hijacking via `CURL_CA_BUNDLE` Environment Variable Leads to MITM

Summary: curl is vulnerable to silent Man-in-the-Middle MITM attacks due to its design, which implicitly trusts the CA certificate path specified in the CURLCABUNDLE environment variable. This mechanism allows the entire TLS trust model chain of trust of curl to be hijacked without any warning or...

EUVD-2025-49385

Malicious code in silentrattlesnakez3n npm...

CLSA-2025-1762455549 Fix CVE(s): CVE-2025-24014

SECURITY UPDATE: segmentation fault in silent Ex mode due to scrolling function vulnerability - debian/patches/CVE-2025-24014.patch: Fix segfault in winline by checking that ScreenLines is not NULL in guidoscroll - CVE-2025-24014...

“Sneaky” new Android malware takes over your phone, hiding in fake news and ID apps

Researchers at Cyfirma have investigated Android Trojans capable of stealing sensitive data from compromised devices. The malware spreads by pretending to be trusted apps—like a news reader or even digital ID apps—tricking users into downloading it by accident. In reality, it’s Android-targeting...

SUSE CVE-2025-40043

In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Add parameter validation for packet data Syzbot reported an uninitialized value bug in nciinitreq, which was introduced by commit 5aca7966d2a7 "Merge tag 'perf-tools-fixes-for-v6.17-2025-09-16' of...

UBUNTU-CVE-2025-40043

In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Add parameter validation for packet data Syzbot reported an uninitialized value bug in nciinitreq, which was introduced by commit 5aca7966d2a7 "Merge tag 'perf-tools-fixes-for-v6.17-2025-09-16' of...

CVE-2025-40043 net: nfc: nci: Add parameter validation for packet data

In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Add parameter validation for packet data Syzbot reported an uninitialized value bug in nciinitreq, which was introduced by commit 5aca7966d2a7 "Merge tag 'perf-tools-fixes-for-v6.17-2025-09-16' of...