Astra Linux - уязвимость в firefox, thunderbird

When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability, this could have led to an out-of-bounds memory read. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...

Astra Linux - уязвимость в firefox

In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash. This vulnerability affects Firefox 99...

Astra Linux - уязвимость в firefox, thunderbird

Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team reported memory safety bugs in Thunderbird 91.7. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have...

Astra Linux - уязвимость в chromium

Inappropriate implementation in the HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass XSS protections through a crafted HTML page. Chrome security severity: Medium...

Astra Linux - уязвимость в chromium

Inappropriate implementation in Permissions in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to tamper with the contents of the Omnibox URL bar via a crafted HTML page...

Malicious code in rita-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8ed42a9ba35ae978d6f705ddb51c47258d6664734497f56f4154529be823ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156084 Malicious code in icha-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e327738ff8b8bdea849fb0c835cbf2c86f7660bf6584548cb9d105b5ea85f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5308f1e7710f142452317e49ffde11bc6a63d5c6cc0647e82b08162b4b87e31f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02782fc23cebb0ff239fd6782e5cde8a44198a711c3667f6bfc39a80dc4de87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe9784354a50a16c92efcdd9cc8f33ed91e9e625d019356be92e04a4eb5e449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164976 Malicious code in rita-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8ed42a9ba35ae978d6f705ddb51c47258d6664734497f56f4154529be823ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e327738ff8b8bdea849fb0c835cbf2c86f7660bf6584548cb9d105b5ea85f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74359

Malicious code in politicalqueleaamber-99 npm...

EUVD-2025-74297

Malicious code in respectivebeavergold-99 npm...

EUVD-2025-74248

Malicious code in shycarpcoral-99 npm...

MAL-2025-112337 Malicious code in soviet_takin_scarlet-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d856c0fd2bf1881ac84790e4346ce7742768aa8369d1d1cb5d310037bf57981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74215

Malicious code in soviettakinscarlet-99 npm...

EUVD-2025-74629

Malicious code in friendlykoalaorange-99 npm...

Malicious code in quiet_marlin_gray-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4390ed3afe73d2d003048efcd31aa77dbcccfce07696a4e12041ea457b0d4599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-1999-1548

Malware in sbrugna...