Security Bulletin: Due to use of Redhat Linux, IBM QRadar Network Packet Capture is vulnerable to a buffer overflow

Summary IBM QRadar Network Packet Capture is bundled with Redhat Linux 8.10. A buffer overflow vulnerability has been addressed CVE-2024-52533 Vulnerability Details CVEID:CVE-2024-52533 DESCRIPTION: gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer...

EUVD-2025-175799

Malicious code in update-hadron-rehype-phoenix npm...

EUVD-2025-180243

Malicious code in augmentedreality-update-tethys-dynamo npm...

MAL-2025-186935 Malicious code in extremophile-slidev-radioastronomy-coronalmassejection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caabac9e0f1bd1f9c12cdd709f620e7c1e8d2e0b6ee9f0e3e16f1553227dcede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Fedora: Security Advisory (FEDORA-2025-4ffeeb504f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in sonic-oig-tmoerocnaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a78815db86c598134d1d064ec5d190d96ada7a3b9e87376860c806273b1c905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184354 Malicious code in modiov-kihan-afibanaivihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dcae0368e3c64e35ec033cae00cf5ed98d1a5da4bbf3e39b9f1fa1ce277c328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185253 Malicious code in tuis-kjt-garfuafaakvdyfimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83cb3bf727dd1ae8b0957f44ec4a7ab301f32aedfbfe78c927872ea47f9ff8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181823 Malicious code in avangs-olims-nolnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6df6bd416530bc5f3969bc4fb9b432a4b670f5a4c0768ba514001808a617033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172705 Malicious code in abtenggg-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362f8413101be238b028425c5fe4e4c09c028143e7a660b7ce0702bf19466b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177345 Malicious code in poglymer-ogihh-afa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b605187fee5a85069ad78147f093957a76aeb12705e343c356428d3cfd83e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171890 Malicious code in solarwatcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017cd56f0a51b9c7182f2e8c06dd848816dabf2ee1e5e106fce4ba1e85572866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06595dbfe70901918961a56092ceaef6483a5e1fd988d50e5805dc9f27641efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becc161ed93b8336d000321add1b0b42ff2dd0dc6be6b53c4bc829ed0765c4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bcede3bd1901d2d9b3b5462bd693735a80ae9986173b5a7919a7c20e94a932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704fae2bd078ccba3987a560ddb4e41779f0d851f933fc4162e946d02f4ce9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151098 Malicious code in abang-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265a3ba2a926350281bcfac9015ae95f6d67c9788f16ba49a0b6fd8e413bf6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153724 Malicious code in billa-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d3841773d8725430e0f0b632055b877ea183b134de43feb9b4c12a930097da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163853 Malicious code in nudla-ofogiari-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898ccb3c946abef07be65c17fdde3faaaaafbb05bddf1c9a12faff3ea88e2973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170096 Malicious code in upa-lubalauvalio-ilualsgdsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f040e6ffc120acfcaa7e1e89f04f81732ad7db467a8ed8b05a03c7ddbc07a18e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...