AlmaLinux 9 : sqlite (ALSA-2025:20936)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:20936 advisory. sqlite: Integer Truncation in SQLite CVE-2025-6965 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note that...

The vulnerability of the concat_ws() function in the SQLite database management system allows a hacker to execute arbitrary code.

The vulnerability of the concatws function in the SQLite database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Malicious code in sqlite-oauth-quito-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ca71d4114f8ae4468c127def1828c69d2b57565bf13761cb5938f72ffc59da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177191

Malicious code in photon-sqlite-package-archaeoastronomy npm...

EUVD-2025-175689

Malicious code in vortex-husky-sqlite-exobiology npm...

EUVD-2025-179276

Malicious code in dorado-hexo-sqlite-postcss-loader npm...

EUVD-2025-176241

Malicious code in sqlite-duplex-robotics-loglevel npm...

EUVD-2025-175980

Malicious code in testcafe-janus-sqlite-bulma npm...

EUVD-2025-177628

Malicious code in neutronstar-regulus-sqlite-stratosphere npm...

EUVD-2025-179713

Malicious code in cli-protractor-sqlite-library npm...

EUVD-2025-177815

Malicious code in miranda-despina-sqlite-ultra npm...

Malicious code in dorado-hexo-sqlite-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4a93ae9c0b359cf320351a3af5fd7016688cc60265a5c221a86d43cd0faad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178466

Malicious code in hyperion-prettier-stylelint-sqlite-rehype npm...

EUVD-2025-176157

Malicious code in sublimation-sadr-magellan-sqlite npm...

EUVD-2025-176238

Malicious code in sqlite-winston-scripts-uninstall npm...

EUVD-2025-177032

Malicious code in procyon-futurology-concurrently-sqlite npm...

EUVD-2025-176240

Malicious code in sqlite-oauth-quito-graphql npm...

EUVD-2025-179877

Malicious code in carpo-aurora-pegasus-sqlite npm...

Malicious code in vortex-husky-sqlite-exobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90045f94e1d9d66252d467fa18357ac19aac151e5ea708173e4ac15adc8779ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188067 Malicious code in miranda-despina-sqlite-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878e603c295849975d59f748701398821459653943002d7433907fc9b3f73aad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...