MAL-2025-120208 Malicious code in galih-teh99-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c50a3cc73fd27585f4d25f6d4c994b310804b7dc54956c51542cde9b7ba7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116470 Malicious code in prospective_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b8184d6210c4e4d2efc51af929d6da4b33ed14e3310c57d18155d1d3174a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-ketan88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f101118dd1447989ba8a82413b00b163a667bd643c836f3c70befdc9da9c328e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114205 Malicious code in gilang-menjes84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe852e53bbd673a3e41caa5fb42fe200ee35bca3fcedf4295e68df42fb2305bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116118 Malicious code in nurul-wajit57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772af6eb532511e5bf5ece615c7084e95c8b51b2ea8dfac5601cf5fa99da9bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-nasi33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bfbd4f9c061bb1e9d568dce3db004d74890c446c9c8ab3f981cdf992708aafb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Important: Red Hat Security Advisory: runc security update

An update for runc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

EUVD-2025-74039

An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the...

kernel: idpf: check error for register_netdev() on init

In the Linux kernel, the following vulnerability has been resolved: idpf: check error for registernetdev on init Current init logic ignores the error code from registernetdev, which will cause WARNON on attempt to unregister it, if there was one, and there is no info for the user that the creatio...

MAL-2025-105277 Malicious code in lively_caribou-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af718d1598669d34a88f13b774722c0c75f7ad4887326c04add60df7fc0e6e3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crazy_ant-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51cc3ffbdc0185ca6c491da761392a8327902115b59f650a328707cc3012708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly_bison_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd37f9d8a76c61aad01e1239e2067e97e4bfdbad66d5be97cf497e9e4bf97b3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107047 Malicious code in personal_termite_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944b4c4ad183462a6525c9061279672eaa4c0a63945c74a4759196893b262a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-gorengan41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c2368c422173114df33aa3f4c6b5895229011fca5c7706af453640e56dd6ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103542 Malicious code in hanafi-mendut14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b6df6c456d13ab0bb77c925c3b8b9f895e9249e632d6e94face5d20c96407d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-menjes29-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e528adff89ce0d50fb5eb22793ce5260aa47482543c3c48a097537101632aff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-5454

An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker...

Malicious code in hadi-brongkos82-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0d6a2fe8a0ae880668cd87f72986f510724c95387bdabd54d133dce65a2053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96959 Malicious code in tense_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f52c7c64462e166ac5263c43eca8d1f767dc58bb33e360b434a1084af9ee88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97283 Malicious code in vivid_bird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b24778e683965e250eb68f37a739fe7a118d90df7861b2f1ae908653b8cb00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...