MAL-2025-131285 Malicious code in wealthy_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c9d088f633564c3a0aff86512b83a0c6094fdf64ebf4239a4dc03f0568a43d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-mendoan83-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc06dc7dcbf70153af58b1737e90d28c2683da3a1e729ba2c0d10a60817861f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-dradag25-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f402ade6db8415aa72830e27c4bc1dd969d8f688d413fc127da4923cc707f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8495fa86ca428af9b981733fc1768535b3a780dbdea22d9f3b3bc4386f6cd4b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118861 Malicious code in bambang-tumis16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d988e671c549189c8ac7cfbefe55b045249eace97acd92cd558518ab480e8336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122062 Malicious code in neat_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5323d27ee90b261249c923f1627c718d684002498e1cb55e9e4883fc9cde667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-kripik16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9c7258e8640b5d3e7724eb5c5ab3c69df9112993ca40bb26a718c4927f70e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117891 Malicious code in vina-gudeg34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c2fd709026b9ea511f41b173c16949b4ef57a6a2a592f86c2be9667b1b2059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in correct_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31728f32654f5a06fcffd68f8555dd87cc91adde36e89edfae10f1d8247cb49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114076 Malicious code in fortunate_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbcfe161de4136b2f516fbc1623a4e343d21890aa082008812f3a9b864ffb0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113076 Malicious code in cindy-klipo60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3d806b1a1e80d4bec5674b18055d5332b0f52d4e5d283089b99a77ec6f83de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retired_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6721b82213ee9a5c66a82bd81e90cb8062ae4e25c7aba451a6ae43528c122a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112609 Malicious code in agus-oncom83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe81d30ae0e4877831cb786fe87f1ef33881349485d4361f88c2638e8c84747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()

A flaw was found in the HFSC queueing discipline implementation in the Linux kernel. When a packet is enqueued and the child qdisc's peek function is called before properly updating the HFSC queue's length and backlog counters, a race condition can occur. In some cases, the peek operation may...

kernel: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree

In the Linux kernel, the following vulnerability has been resolved: net/sched: Return NULL when htblookupleaf encounters an empty rbtree htblookupleaf has a BUGON that can trigger with the following: tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc class add dev lo...

Malicious code in favourable_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfcb338aea6108b5de147ac03d9eaff903c7a7223b93ecce5e4f11de55119632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102723 Malicious code in financial_reindeer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547d061801817c35cb63e5410ea27c94c72f9b198f3c24e7db543dcd13b068a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110034 Malicious code in unaware_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daece8987eecf3b54e1b8c11501279a5e42f0597a756cd1b86b61b6d29a019a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102451 Malicious code in extreme_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4335bcdef4da320667d33ea52bf79bf24730916029e3673a49e0fbeaa57c156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marvellous_gayal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 021bc3ebd7702fcfb3e92ff9295e0c46a93765fa4a8a2037f7ebdbc7c3ca5144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...