Malicious code in apollo-element-ui-magellan-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba972a9af2c18c32af8952189c8f1f93988448b04dfd8f4e96bace6ca92a2058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144961 Malicious code in middleware-mongodb-leda-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac868d322cce021ae4cda8e245af3f8fa418596dc7f29ba457f1caaf7666878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-ophiuchus-xo-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21214842cd4cf23c4aed99f5eb4277c186325847a0fc2aab7e2c03f867aecc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141924 Malicious code in electron-orbit-eris-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31d6232b592be2cc1a0994076a160047d12756e8ff87bd53613432dc6ecf7e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Fedora: Security Advisory (FEDORA-2025-45da53cabc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990735)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990735 advisory. In the Linux kernel, the following vulnerability has been resolved: keys: Fix overwrite of key expiration on instantiation The expiry time of a key is unconditionall...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990845)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990845 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix idatasem unlock order in ext4indmigrate Fuzzing reports a possible deadlock in...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2025-2364)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-46700

Name of the Vulnerable Software and Affected Versions Tuleap Community Edition versions prior to 16.13.99.1761813675 Tuleap Enterprise Edition versions prior to 16.13-5 and 16.12-8 Description Tuleap lacks cross-site request forgery CSRF protection in the management of Subversion SVN commit rules...

Debian: Security Advisory (DLA-4368-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in gita-rawon68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc090ed52d55fdbc323c43e1384c7d5e561eeda021800203f69cc4065f5672c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133060 Malicious code in eko-sambel36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eafa5e39c232c2f3c3306d88e6cf29b95ade187636341fea0c1765622fda417d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in personal_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c85c16d187e5cbbf0b8b23fd0c771209856007eea7f6b88ca58e9dc39be0d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kupat13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9507743fe6d94ae5f9a90c7dfd113c5ae1d842f125f89cfdb4dc95f5db3ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129027 Malicious code in ocha-gorengan6-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91699d4c14662e29837bd5596e957bc2939b6be60c8bfe3d167ed73992f31dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-jengkol6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4cf132791de236969a1e23153cf90f1079dc7085c6f1c88c91275d981642847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Important: Red Hat Bug Fix Advisory: .NET 10.0 bug fix and enhancement update

An update for .NET 10.0 is now available for Red Hat Enterprise Linux 10. Please updateBug Fixes and Enhancements: Update .NET 10 to RC 1 rhel-10.1.z JIRA:RHEL-114571 Update .NET 10 to RC 2 rhel-10.1.z JIRA:RHEL-121558 dotnet10.0: .NET Denial of Service Vulnerability rhel-10.1.z JIRA:RHEL-120611...

Vulnerabilities fixed in Microsoft Visual Studio

Microsoft has fixed vulnerabilities in Visual Studio and Code Copilot for Visual Studio. A malicious party could exploit the vulnerabilities to bypass security measures and execute arbitrary code in the victim's context. For successful exploitation, the malicious party must trick the victim into...

Vulnerability fixed in Microsoft SQL Server

Microsoft has fixed a vulnerability in SQL Server. An authenticated malicious party can exploit the vulnerability to use specially prepared SQL statements SQL Injection to grant themselves elevated privileges and thus gain access to sensitive information that the malicious party is not initially...

Vulnerabilities fixed in Microsoft Dynamics

Microsoft fixed vulnerabilities in Dynamics The vulnerabilities are in Dynamics 365 On Premise and Dynamics Field Service and allow a malicious person to access sensitive data, or impersonate another user. Microsoft has made updates available that fix the described vulnerabilities. We encourage y...