EUVD-2025-51166

Malicious code in vivid-aqua-thrush npm...

MAL-2025-71484 Malicious code in vivid-chocolate-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e489cddaa4404a17ed2d807695dd1ab0eaefa3e01aec3d9f272e7b902ab1f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56610

Malicious code in vividseahorsez3n npm...

EUVD-2025-49069

Malicious code in vividelkz3n npm...

Malicious code in vivid_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3074c2be0ff97b86a776b0f7f1a620c0c2fd8301f70a79b82bc6a594837e1eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61599 Malicious code in vivid_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3074c2be0ff97b86a776b0f7f1a620c0c2fd8301f70a79b82bc6a594837e1eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990444)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990444 advisory. In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix compose size exceed boundary syzkaller found a bug: BUG: unable to handle page...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988771)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988771 advisory. In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix compose size exceed boundary syzkaller found a bug: BUG: unable to handle page...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987574)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987574 advisory. In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix compose size exceed boundary syzkaller found a bug: BUG: unable to handle page...

EUVD-2025-20030

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-38226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: vivid: Change the siize of the composing syzkaller found a bug: BUG: KASAN: vmalloc-out-of-bounds in tpgfillplanepattern...

Malicious code in test-mlw2-parts-vivid (npm)

The package test-mlw2-parts-vivid was found to contain malicious code...

Malicious code in test-mlw2-vivid-ashes-creek-fores (npm)

The package test-mlw2-vivid-ashes-creek-fores was found to contain malicious code...

MAL-2025-35399 Malicious code in test-mlw2-geare-vivid (npm)

The package test-mlw2-geare-vivid was found to contain malicious code...

Malicious code in vivid-shimmer-dqh065-project (npm)

The package vivid-shimmer-dqh065-project was found to contain malicious code...

Malicious code in test-mlw2-geare-vivid (npm)

The package test-mlw2-geare-vivid was found to contain malicious code...

MAL-2025-36587 Malicious code in test-mlw2-vivid-ashes-creek-fores (npm)

The package test-mlw2-vivid-ashes-creek-fores was found to contain malicious code...

MAL-2025-35947 Malicious code in test-mlw2-parts-vivid (npm)

The package test-mlw2-parts-vivid was found to contain malicious code...

MAL-2025-38516 Malicious code in vivid-shimmer-dqh065-project (npm)

The package vivid-shimmer-dqh065-project was found to contain malicious code...

CVE-2025-55193

Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences. This issue has been patched in...