Malicious code in wulan-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0b2bc8d499a0d1c5faf0e227e8a2085467ed4ec95d36dc4f569c4afff6c823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153663 Malicious code in billa-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9908d3b6807aa6802683038b0e6a878ba6e1c31c193683e1ff8d63c59042f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165239 Malicious code in ruji-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5abb35592893e96a61aff0e81f73d791acc46e2e06ef7283f28e7b2bdad2a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170539 Malicious code in wulan-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0b2bc8d499a0d1c5faf0e227e8a2085467ed4ec95d36dc4f569c4afff6c823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c8207faedc36e5776bf1c6320b2d4d9fa0d853a0ff6926874476a0bd823309b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4682f39f318473bccad3e644f2ed4f532d3749a89cc4b97acdc2996dffd5017c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e37e35407ee8f6d8be71fa71774bbd2e93a82bfa45ad4315ad60cd81903db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146230

Malicious code in yuda-15 npm...

Malicious code in ilop-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b19e420063e5c5975cc927dfea4a744260f8ecab490c883e6d232db09c69c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154296 Malicious code in dia-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fdba0d2be064e26691b72b3dd34dc42756849707b82ffb36709cd5189002235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152812 Malicious code in aril-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75293ebba452b30b1dfc7d3ea666f40c8f5a944dcae3c2b75199d3b3179f59e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170582 Malicious code in yuda-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bfe97055b26c235e7f2e691214f8d6f1de2997df1cbbe1588fcb11188d5b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64407

Technical details for CVE-2025-64407 are not publicly provided in the connected documents. Available sources discuss related vulnerabilities (CVE-2024-12425/12426) and Apache OpenOffice issues, but do not specify this CVE’s affected products, root cause, or fixes.

CVE-2025-9227

creationtimestamp| type| source ---|---|--- 2025-11-11 15:33:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ehk2v7do2b 2025-11-11 17:41:28+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5eomqrbf6t2...

EUVD-2025-74372

Malicious code in peculiarcrocodilescarlet-15 npm...

EUVD-2025-74398

Malicious code in oralocelotred-15 npm...

EUVD-2025-74588

Malicious code in happysnakeindigo-15 npm...

Malicious code in oral_ocelot_red-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6666ab1a876fea822d1dd932b417e25522972290488f2a615324a7536f37a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-63710

creationtimestamp| type| source ---|---|--- 2025-11-10 15:40:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5bxheuwf42b...

Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP7)

This update for the Linux Kernel 6.4.0-150700536 fixes several issues. The following security issues were fixed: CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. CVE-2025-38511: drm/xe/pf: Clear all LMTT pages on alloc bsc1248176. CVE-2025-38617: net/packet: fi...