MAL-2025-154035 Malicious code in cinta-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6698bc9204796aad656dd385f84523ff47775b15861d9396a71a72d45769f36a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152047 Malicious code in aji-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1affc41b278f247a3f0304eec107e70161731bb239510bd0eb16e50997f72ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6698bc9204796aad656dd385f84523ff47775b15861d9396a71a72d45769f36a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42600b321a0176c922397674eb2572792bf3fc69585924c2a128124ea7c0f270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3948d8f23d42b052821fd980b46cf0e5c6c69fd4667f8e2d5a1b5ffc3afcb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irassdhi-1-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a48649ad017a8634b9af7354c56cd985a5aa658cf197e4f4f38a6a6f4652a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1affc41b278f247a3f0304eec107e70161731bb239510bd0eb16e50997f72ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146236

Malicious code in yuda-1 npm...

Malicious code in icha-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0051ddda9354c9dfb0fa28b1358182f7474916a389b9ee48940608afd7fc0197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164878 Malicious code in rita-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd87721e88fb4cf7bb85fa17fecdd11a782471ba87b0540f80daacad9074498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155563 Malicious code in hafiz-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf835cfe210b9c2fc00c17941b1091207786837a751fe4593f8974ba280df35f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ad1d60f0671523911e663278c7fc3de5c7fd17cf50cf6c150ac7b35e45bf44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf835cfe210b9c2fc00c17941b1091207786837a751fe4593f8974ba280df35f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab34cd176788e365a3a652d0944bbab4691a6c00c67da665229685b2d330eec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

AZL-70025 CVE-2025-40158 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6output Use RCU in ip6output in order to use dstdevrcu to prevent possible UAF. We can remove rcureadlock/rcureadunlock pairs from ip6finishoutput2...

AZL-69998 CVE-2025-40139 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: smc: Use skdstget and dstdevrcu in in smcclcprfxset. smcclcprfxset is called during connect and not under RCU nor RTNL. Using skdstgetsk-dev could trigger UAF. Let's use skdstget and devdstrcu under rcureadlock after...

CVE-2025-64407

Technical details for CVE-2025-64407 are not publicly provided in the connected documents. Available sources discuss related vulnerabilities (CVE-2024-12425/12426) and Apache OpenOffice issues, but do not specify this CVE’s affected products, root cause, or fixes.

CVE-2025-52881 affecting package moby-runc for versions less than 1.2.8-1

CVE-2025-52881 affecting package moby-runc for versions less than 1.2.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-31133 affecting package moby-runc for versions less than 1.2.8-1

CVE-2025-31133 affecting package moby-runc for versions less than 1.2.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-52565 affecting package moby-runc for versions less than 1.2.8-1

CVE-2025-52565 affecting package moby-runc for versions less than 1.2.8-1. An upgraded version of the package is available that resolves this issue...