EUVD-2025-178935

Malicious code in fast-sudo-fire-chi-authenticate npm...

EUVD-2025-180146

Malicious code in bad-key-short-sudo-resolve npm...

EUVD-2025-180123

Malicious code in bash-serialize-decode-grid-sudo npm...

EUVD-2025-179923

Malicious code in byte-root-test-kappa-sudo npm...

EUVD-2025-179849

Malicious code in cat-sudo-node-decrypt-analyze npm...

EUVD-2025-179748

Malicious code in chi-cron-sudo-finally-visualize npm...

EUVD-2025-179157

Malicious code in emulate-sudo-query-balance-air npm...

EUVD-2025-180321

Malicious code in array-eta-sudo-new-cron npm...

EUVD-2025-179278

Malicious code in dog-water-double-sudo-export npm...

EUVD-2025-179913

Malicious code in cache-simple-awk-sudo-class npm...

EUVD-2025-176147

Malicious code in sudo-emulate-stack-deploy-psi npm...

EUVD-2025-175985

Malicious code in test-sudo-notify-meta-orchestrate npm...

MAL-2025-187468 Malicious code in info-byte-simulate-cat-sudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0027d2338d6014bc490d64b292626df8d2de44402c81596a7920b4d4fc8d485b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178414

Malicious code in info-byte-simulate-cat-sudo npm...

EUVD-2025-179163

Malicious code in emulate-await-sudo-code-grid npm...

CVE-2025-64517

sudo-rs is a memory safe implementation of sudo and su written in Rust. With Defaults targetpw or Defaults rootpw enabled, the password of the target account or root account instead of the invoking user is used for authentication. sudo-rs starting in version 0.2.5 and prior to version 0.2.10...

CVE-2025-64517

sudo-rs is a memory safe implementation of sudo and su written in Rust. With Defaults targetpw or Defaults rootpw enabled, the password of the target account or root account instead of the invoking user is used for authentication. sudo-rs starting in version 0.2.5 and prior to version 0.2.10...

UBUNTU-CVE-2025-64517

sudo-rs is a memory safe implementation of sudo and su written in Rust. With Defaults targetpw or Defaults rootpw enabled, the password of the target account or root account instead of the invoking user is used for authentication. sudo-rs starting in version 0.2.5 and prior to version 0.2.10...

CVE-2025-64517

sudo-rs (Rust implementation of sudo) is affected by CVE-2025-64517. Versions prior to 0.2.10 incorrectly recorded the invoking user’s UID in the authentication timestamp when Defaults targetpw/rootpw are enabled, which could allow a highly-privileged user to run commands as other accounts using ...

CVE-2025-64517 sudo-rs doesn't record authenticating user properly in timestamp

sudo-rs is a memory safe implementation of sudo and su written in Rust. With Defaults targetpw or Defaults rootpw enabled, the password of the target account or root account instead of the invoking user is used for authentication. sudo-rs starting in version 0.2.5 and prior to version 0.2.10...