GHSA-Q428-6V73-FC4Q sudo-rs doesn't record authenticating user properly in timestamp

Summary When Defaults targetpw or Defaults rootpw is enabled, the password of the target account or root account instead of the invoking user is used for authentication. sudo-rs prior to 0.2.10 incorrectly recorded the invoking user’s UID instead of the authenticated-as user's UID in the...

CVE-2025-64517

A flaw was found in sudo-rs. This vulnerability allows authentication bypass via incorrect recording of the authenticating user in the timestamp...

EUVD-2025-179377

Malicious code in decompress-sed-sudo-index-nu npm...

Malicious code in sudo-emulate-stack-deploy-psi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ac55148fee2d109b41c3075f3a4e39294e50decd8f2b0fef35db75ce9175b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180321

Malicious code in array-eta-sudo-new-cron npm...

EUVD-2025-176944

Malicious code in psi-sudo-key-simulate-double npm...

EUVD-2025-180123

Malicious code in bash-serialize-decode-grid-sudo npm...

EUVD-2025-179923

Malicious code in byte-root-test-kappa-sudo npm...

MAL-2025-187468 Malicious code in info-byte-simulate-cat-sudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0027d2338d6014bc490d64b292626df8d2de44402c81596a7920b4d4fc8d485b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178414

Malicious code in info-byte-simulate-cat-sudo npm...

EUVD-2025-179278

Malicious code in dog-water-double-sudo-export npm...

EUVD-2025-180146

Malicious code in bad-key-short-sudo-resolve npm...

EUVD-2025-176147

Malicious code in sudo-emulate-stack-deploy-psi npm...

EUVD-2025-179913

Malicious code in cache-simple-awk-sudo-class npm...

EUVD-2025-179157

Malicious code in emulate-sudo-query-balance-air npm...

EUVD-2025-179849

Malicious code in cat-sudo-node-decrypt-analyze npm...

EUVD-2025-178289

Malicious code in java-simple-void-fork-sudo npm...

EUVD-2025-176146

Malicious code in sudo-reject-mu-proxy-fork npm...

EUVD-2025-179748

Malicious code in chi-cron-sudo-finally-visualize npm...

EUVD-2025-176145

Malicious code in sudo-yaml-virtualize-encode-pi npm...