MAL-2025-149419 Malicious code in websockets-dactyl-element-ui-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60df6ca1abf2df23e74ec069e81a2cd86a6d25bb74a68c80edb3ed26271c897e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141980 Malicious code in element-ui-proxima-sync-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d1516a39fae6f5fa9467f1039259512b48cab124ba4540daba287523350a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142687 Malicious code in framework-mysql-regulus-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4713f90c44e813de6e1ae468be5e23ecf7228066c5cb246888f727377943d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142731 Malicious code in fusion-element-ui-browserify-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3ceb40b6042bd1dc98340857c23502250ba04d1b033674c17a6d37bb7559a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141988 Malicious code in element-ui-xerxes-elara-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16e8c3b0a75e3d1b6080c8124bc4f5c0c3de6d2e192c28a952d63dcbdc89aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139926 Malicious code in bellatrix-axios-babel-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf95012ad35bf05dc6070a021a48ea1bcca166e963aa2404e5322f93c71b73bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141965 Malicious code in element-ui-cypress-rimraf-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 493466bc6493159f8029ee1e528708c0e1375665215a2c5504d479db8370d0c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141962 Malicious code in element-ui-ceres-aquarius-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e54814dfe23a781cb3e4bd646a7076f4328a131fa2f85effb56c7c81ba91163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146647 Malicious code in promise-registry-bellatrix-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1a5c501ec3299dcc8dfa9935e0f26ed824255bb5062b9cb5ddfe62fbd4f34c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142660 Malicious code in fornax-unuk-element-ui-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd97146eb66ddbfec41907b5ad2a7e36812cba94513624732447a3b7656fb77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146389 Malicious code in postcss-loader-child-process-element-ui-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dc10cb21328b6fa7193c5174c025aab42f49ae52a684435b85bfcfe965e9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141971 Malicious code in element-ui-jwt-uninstall-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5a60826ce2dae0b128158911da5fd082c31135b1f850b0e1134ec983ed2dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141975 Malicious code in element-ui-nestjs-draco-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d3d5af2f7340132e6fed6f2da3b621668536b4d11f2c9d5b05065138ad0780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114233

Malicious code in elara-hermes-element-ui-ini npm...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990785 advisory. In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDNdspelementregister Afer commit 1fa5ae857bb1 driver core:...

The vulnerability of the ngfx component of the NVIDIA Nsight Graphics debugging tool allows a hacker to execute arbitrary code, increase privileges, and cause service interruptions.

The vulnerability of the ngfx component of the NVIDIA Nsight Graphics debugging tool is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a perpetrator to execute arbitrary code, increase privileges, and cause service failures...

GHSA-G8JH-VG5J-4H3F Apollo Router Improperly Enforces Renamed Access Control Directives

Summary A vulnerability in Apollo Router allowed for unauthorized access to protected data through schema elements with access control directives @authenticated, @requiresScopes, and @policy that were renamed via @link imports. Router did not enforce renamed access control directives on schema...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989181)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989181 advisory. In the Linux kernel, the following vulnerability has been resolved: mac80211: validate extended element ID is present Before attempting to parse an extended element,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989786)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989786 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable will be a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988805)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988805 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Track subprog poke descriptors correctly and fix use-after-free Subprograms are calling...