Important: Red Hat Security Advisory: runc security update

An update for runc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

EUVD-2025-74039

An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the...

kernel: idpf: check error for register_netdev() on init

In the Linux kernel, the following vulnerability has been resolved: idpf: check error for registernetdev on init Current init logic ignores the error code from registernetdev, which will cause WARNON on attempt to unregister it, if there was one, and there is no info for the user that the creatio...

Malicious code in crazy_ant-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51cc3ffbdc0185ca6c491da761392a8327902115b59f650a328707cc3012708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105277 Malicious code in lively_caribou-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af718d1598669d34a88f13b774722c0c75f7ad4887326c04add60df7fc0e6e3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly_bison_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd37f9d8a76c61aad01e1239e2067e97e4bfdbad66d5be97cf497e9e4bf97b3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107047 Malicious code in personal_termite_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944b4c4ad183462a6525c9061279672eaa4c0a63945c74a4759196893b262a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-gorengan41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c2368c422173114df33aa3f4c6b5895229011fca5c7706af453640e56dd6ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-menjes29-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e528adff89ce0d50fb5eb22793ce5260aa47482543c3c48a097537101632aff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103542 Malicious code in hanafi-mendut14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b6df6c456d13ab0bb77c925c3b8b9f895e9249e632d6e94face5d20c96407d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-5454

An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker...

Malicious code in hadi-brongkos82-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0d6a2fe8a0ae880668cd87f72986f510724c95387bdabd54d133dce65a2053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rolling_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c5111caa1c2952a02647c1484752d9f577f28f8ff1797660e11b1ec0add415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97283 Malicious code in vivid_bird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b24778e683965e250eb68f37a739fe7a118d90df7861b2f1ae908653b8cb00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96959 Malicious code in tense_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f52c7c64462e166ac5263c43eca8d1f767dc58bb33e360b434a1084af9ee88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78435 Malicious code in gita-bakso13-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00423d1012d91b68ea62eff7eab1ae87a6a4c71dd952b977ddfe745c1a69aacf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-mangga60-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c284d066c565a9270c281f08f68c0f3ae69dce11f0437cfc5956cf925f780a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-otak-otak97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5186dd8c2dda512fdc9d6e59b543ce84fcd34f6f15d40f3419d55a4f4d306c62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-kepok41-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2771ae3a832a63b69d2f55105cb651def07631f11e8ae0a09a0291f6b6271489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-tahutek88-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9824d6e0d6529777f867a9075befb93d71f0b43ddbec4cbc2e5222c4873388b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...