EUVD-2025-180155

Malicious code in backend-exec-husky-public npm...

Malicious code in spawn-exec-zenobia-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d195fec77b588ee50726619249d1d77aacd06b4a03966370f3dee0c6edc02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-ora-exec-genomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d17c4563e99682e42e4eae296514441c01b6f64a6c19ecde3adc967d542d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177812

Malicious code in miranda-exec-meissa-terser npm...

EUVD-2025-176166

Malicious code in subduction-exec-redis-gatsby npm...

EUVD-2025-178991

Malicious code in exec-radiometric-aether-juno npm...

EUVD-2025-176155

Malicious code in subscription-carina-standard-exec npm...

EUVD-2025-178989

Malicious code in exec-virtualreality-wolf-paleoecology npm...

EUVD-2025-178994

Malicious code in exec-markdown-avior-sirius npm...

MAL-2025-187557 Malicious code in izar-ora-exec-genomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d17c4563e99682e42e4eae296514441c01b6f64a6c19ecde3adc967d542d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178325

Malicious code in izar-ora-exec-genomics npm...

EUVD-2025-178988

Malicious code in exec-zephyr-xo-izar npm...

EUVD-2025-177347

Malicious code in paleontology-mensa-altair-exec npm...

EUVD-2025-180235

Malicious code in aurora-exec-nebula-titan npm...

EUVD-2025-177969

Malicious code in magnetosphere-exec-hyperion-spinner npm...

EUVD-2025-176280

Malicious code in spawn-exec-zenobia-ganymede npm...

Malicious code in aurora-exec-nebula-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727d149233b8486494ce40ab83a3e2e4ecf442479f183b3b96baae8f80f59da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178995

Malicious code in exec-local-mongoose-dione npm...

EUVD-2025-178996

Malicious code in exec-dactyl-halley-phoebe npm...

CVE-2025-40201

CVE-2025-40201 concerns a race in the Linux kernel’s sys_prlimit64() path where task_lock(tsk->group_leader) can operate on a freed task_struct or race with mt-exec changing group_leader. The affected code path only protects the task_struct itself via get_task_struct(tsk); if tsk != current an...