MAL-2025-165235 Malicious code in ruji-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f7cba86e4fe9a213a130b86d95caad93167f1872b9423e0799a357de2230f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157490 Malicious code in kentung-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e7d0030aea96a4bf934407d3cc7b11e6b90856b7ba8024bcc01c7f6fac0db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 193e78479ef655d75f9179f24b100454037e7a92ae54936a7b5bbd6cbe0c1d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe9a0df6f11dd0fcb3abdf7a933981c6fbb404431dc87ce827fbb628ab5cf31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaasya-11-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3c0372ef3d7d7be9b07698f3f61ff3a4c7110f81d98025c91c473266804fa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd03c4dbe48ee3b5debf52480047ac9b9c05db847619649f8f1c15108bc9b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428cf6217a5f74b3ddb997610505c9a0cef06ad7cc4dd2b3cfb3238ea293b929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170535 Malicious code in wulan-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf46a00cd6e1f5f54b8e2d9db83f043bcfa8ca8199ea26a043e1783492f0227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154038 Malicious code in cinta-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd03c4dbe48ee3b5debf52480047ac9b9c05db847619649f8f1c15108bc9b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156519 Malicious code in intan-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645c3f3884e6491820cd530d6214bd3db8e3690068b729dd532607dd1a60d629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40171

creationtimestamp| type| source ---|---|--- 2025-11-12 12:36:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5go4gojrl2q 2025-11-12 14:01:00+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5gsrrzxhpd2 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-40174

creationtimestamp| type| source ---|---|--- 2025-11-12 12:31:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gntib3lq2w 2025-11-12 14:01:24+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5gss62ksdd2...

CVE-2025-40170

creationtimestamp| type| source ---|---|--- 2025-11-12 12:26:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gnkjtj452s 2025-11-12 14:01:22+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5gsruq7no52 2025-12-03 14:14:49+00:00| seen|...

CVE-2025-40169

creationtimestamp| type| source ---|---|--- 2025-11-12 11:57:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5glvwvwcn2w 2025-11-12 14:00:57+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5gsrdfaptu2 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-40165

creationtimestamp| type| source ---|---|--- 2025-11-12 11:54:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5glr2ixlk2a 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2025-40167

creationtimestamp| type| source ---|---|--- 2025-11-12 11:52:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5glml4gt22s 2025-11-12 13:16:28+00:00| seen| https://gist.github.com/Darkcrai86/9a47b4447e0b927ac17ffe57789c7409 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-40159

creationtimestamp| type| source ---|---|--- 2025-11-12 11:47:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5glelszwb2s 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2025-40168

creationtimestamp| type| source ---|---|--- 2025-11-12 11:42:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gl2i56eh2s 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-02-20 14:25:23+00:00| seen|...

CVE-2025-40160

creationtimestamp| type| source ---|---|--- 2025-11-12 11:38:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gkunsvk72q 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-40159

In the Linux kernel, the following vulnerability has been resolved: xsk: Harden userspace-supplied xdpdesc validation Turned out certain clearly invalid values passed in xdpdesc from userspace can pass xp,unalignedvalidatedesc and then lead to UBs or just invalid frames to be queued for xmit...