Malicious code in flights-lutg-odli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0d885e2deaea4d84ac5a093806a77d24b206975b1c1e90b36a42f5f3e19895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilimo-civufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4662fe9d06fcd84b06fa641c844cb59864d1936e8c7e5c93a0f31a80a85c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183003 Malicious code in itale-dci-rfrttr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a0647df2f9cb098e344f97eeda7f412f9a22a5678e0f46cd36c7ff164312da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40204

In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...

UBUNTU-CVE-2025-40204

In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...

CVE-2025-40204 sctp: Fix MAC comparison to be constant-time

In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...

CVE-2025-40204

Vulnerability CVE-2025-40204 in the Linux kernel affects SCTP MAC comparison; the issue is resolved by ensuring constant-time MAC comparisons. The advisory texts explicitly state that the fix is in the Linux kernel SCTP code and aim to prevent timing attacks. Connected documents also show multipl...

Malicious code in baso95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fa99661cef77900a53cec9544cd3cd99c9a978c60aecc45cec814557169065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174740 Malicious code in hitachi-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbc9030235bea7ed078870a6aefe342da444f17ce0bb4ccbc7c08f374f2d921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172741 Malicious code in ahunim-satf-anj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector effc96829195e72cb0965bef60ae534ce9eb779d8b3775d3caa276730c11fe45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178901 Malicious code in teagod-naiman18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ec439c42d8c1e6f847d9c8157db121fc0f28744c333c46b2928b5c2fef1c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibogagaa-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df813c17c790a515379693b453fffb5e933c8f1b2e6c3bcde717c0bf46fae040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172636 Malicious code in @mipta1/r2seads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4065dd1a960c3fb93d4e52b6d8eedf94014df0020f347fc1804019456563da0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171987 Malicious code in vinitsharma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6742ebb05acf693f42e64f11ea7ec37949599af2dce5c0f6c206061f2dab08f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-25236

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks...

CVE-2025-25236

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks...

Malicious code in polymedr-mindatas-buip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e25a99bf946535fb00406d56117d88d78cc6dcbadaeb7f9f4999eb9a7171a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168731 Malicious code in tealove-reborn8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3f9a9c753f47a044ec3cef00afb13e2b594b2e6816904f544347a2e196ff80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frasu-ofuratarau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f25eb73efdc6a24c0fda816ad22bb1f9cc3d86ae4f86bb4867d8ebd9501f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69c525b257114cb86b24ebd0224d905bfc5dd12f698682fb30f9bdb383e6222c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...