EUVD-2025-175922

Malicious code in tool-callisto-betelgeuse-axios npm...

EUVD-2025-177161

Malicious code in pipe-auth0-barnard-tool npm...

PT-2025-46861

MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can get sensitive informations by Python code in tool module, although the process run in sandbox. Version 2.3.1 fixes the issue...

MaxKB 代码问题漏洞

MaxKB is a 1Panel-dev open source open source knowledge base question and answer system based on a large language model and RAG. A code issue vulnerability exists in MaxKB versions prior to 2.3.1, which stems from a user being able to access internal web services via Python code in a tool module,...

MaxKB 信息泄露漏洞

MaxKB is a 1Panel-dev open source open source knowledge base question and answer system based on a large language model and RAG. An information disclosure vulnerability exists in MaxKB versions prior to 2.3.1, which stems from the fact that users can obtain sensitive information via Python code i...

PT-2025-46859

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.3.1 Description MaxKB, an open-source AI assistant for enterprise, allows a user to access internal network services, such as databases, through Python code within the tool module. This process operates within a sandb...

Photon OS 5.0: Docker PHSA-2025-5.0-0667

An update of the docker package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0667. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

MAL-2025-178474 Malicious code in sahu-satug-induitaggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3842cfd6191b62f33fc42b10872cc7e06dc7b097788f96759d2e631a48cd7d1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152859 Malicious code in aril-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2eb3f14b94958b49cdd24396c50bf0047fea78577b201cc5d869a2b2893c1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167726 Malicious code in teagood-namakai69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f7741f49bc2c37839e3f4cac19382c49802afd0121a08191342d5ee5e67b49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124920

In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Stop dlserver before CPU goes offline IBM CI tool reported kernel warning1 when running a CPU removal operation through drmgr2. i.e "drmgr -c cpu -r -q 1" WARNING: CPU: 0 PID: 0 at kernel/sched/cpudeadline.c:219...

CVE-2025-40163 sched/deadline: Stop dl_server before CPU goes offline

In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Stop dlserver before CPU goes offline IBM CI tool reported kernel warning1 when running a CPU removal operation through drmgr2. i.e "drmgr -c cpu -r -q 1" WARNING: CPU: 0 PID: 0 at kernel/sched/cpudeadline.c:219...

CVE-2025-40163 sched/deadline: Stop dl_server before CPU goes offline

In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Stop dlserver before CPU goes offline IBM CI tool reported kernel warning1 when running a CPU removal operation through drmgr2. i.e "drmgr -c cpu -r -q 1" WARNING: CPU: 0 PID: 0 at kernel/sched/cpudeadline.c:219...

EUVD-2025-115136

Malicious code in commitlint-config-angular-ultra-ariel-nodemon npm...

Malicious code in tool-rocket-impulse-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da69e02ea1de6c0283031e9f19b73ff166dcc8006bfd5f7ab0b19b6d484ba878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-fusion-typeorm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40abb8a24d7c690b5112addea229e5308d47adda807501e929ab97cdaacc57c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114457

Malicious code in dione-tool-exec-achernar npm...

Malicious code in lint-jabbah-elektra-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b1393ad21c122c488010604c363c0c5385feb33514676d1aaa1a267fa1ed98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115298

Malicious code in cli-sedna-xo-tool npm...

Malicious code in link-umbra-spectron-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536e47fdfce250fe64bd38d1a246f1fe8af603ae7131fd0af3df43f6ca78d261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...