Debian: Security Advisory (DSA-6054-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-40184

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix debug checking for np-guests using huge mappings When running with transparent huge pages and CONFIGNVHEEL2DEBUG then the debug checking in asserthostsharedguest fails on the launch of an np-guest. This WARNON...

CVE-2025-40202

In the Linux kernel, the following vulnerability has been resolved: ipmi: Rework user message limit handling The limit on the number of user messages had a number of issues, improper counting in some cases and a use after free. Restructure how this is all done to handle more in the receive messag...

CVE-2025-40201

In the Linux kernel, the following vulnerability has been resolved: kernel/sys.c: fix the racy usage of tasklocktsk-groupleader in sysprlimit64 paths The usage of tasklocktsk-groupleader in sysprlimit64-doprlimit path is very broken. sysprlimit64 does gettaskstructtsk but this only protects...

EUVD-2025-141320

Malicious code in ira-13 npm...

Malicious code in ira-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46fb25c9e79a081c630061039ebd3127969a224ba4df78c4994371d999e23077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139973

Malicious code in nitaaus-13-reff npm...

Malicious code in hokage-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f05b38e64c6cdebcc247e594fb08cd9e3fd366e6bef34b2c9c4ea7c77ebf10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143541

Malicious code in alvino-13 npm...

EUVD-2025-140432

Malicious code in lia-13 npm...

EUVD-2025-141532

Malicious code in hokage-13 npm...

Malicious code in riya-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936362886453635fa0be1be2ec45e9ece18319e7a0e273011b2ed113b02b1948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172762 Malicious code in alvino-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8d45324e3481e0aa4d53a74f803da1a4064a51a2269f6a21ab8867b1ca23da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174748 Malicious code in hokage-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f05b38e64c6cdebcc247e594fb08cd9e3fd366e6bef34b2c9c4ea7c77ebf10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174951 Malicious code in ira-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46fb25c9e79a081c630061039ebd3127969a224ba4df78c4994371d999e23077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178292 Malicious code in riya-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936362886453635fa0be1be2ec45e9ece18319e7a0e273011b2ed113b02b1948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137092

Malicious code in riya-13 npm...

Malicious code in ruji-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d8352085a33a4f73a81224ed7f2c1841a9f7b9861304b2e49189ae067ba923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa471e5a54a351be2f9471640d90aafeb53d317765227fad51573989f840e342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e4a6fe4971b72ce507283f245513c18698a155570733ae10c4acfb4610d869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...