2410 matches found
MAL-2025-146705 Malicious code in proxima-antares-fork-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c5a865e3d4d02711490a2be6a57c970e51104a73d1676040dc3d3f42ba52cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143564 Malicious code in indus-fork-rimraf-forever (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa831a89833772caceac7a6c6708f1dc1efc4af5b76d2e7f5c29c49b52d87fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123526
Malicious code in postcss-loader-fork-levels-venus npm...
EUVD-2025-122687
Malicious code in release-it-sass-loader-parcel-fork npm...
MAL-2025-148679 Malicious code in titan-fork-centaurus-fornax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f1852f1c60fd756f9680f7687b62b5f8b5fe73c9b92121a04e655bab2524630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142597 Malicious code in fork-sedna-nightwatch-cors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b890777daf258afd20e0fc21e1e0f98e4209fcca3ae4ef83e1a7f8c437ecdfa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142590 Malicious code in fork-helmet-telesto-cluster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7679ea7ca27cc8b5ba3c2132e37b1bc1dbea0f92c14cdb6fcb9ce04322da927b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142584 Malicious code in fork-csv-standard-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207804b34c80b70376e5579f1c9e4b7c425db63c480b78e030d71008f1416272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149825 Malicious code in yildun-vuetify-fork-global (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368ed533673888e54c66221181fd64ec8dc89a8f4b0172d01172e1acc14a28b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144459 Malicious code in lint-staged-library-fork-perseus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599e178fbd7b06563cee8ffa42611bd250dbf206a67592c620ac211ef0d23d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in vulcan-fork-colors-neptune (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902b014ef02bf4a89bd5777fe120aaf8ffb901c0b2721470f49bba8874914733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-191702 Malicious code in chromifypro (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4138883ad2e38b4a8a4353918126f4732db5f04107be0bddafc745ec97120b52 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp a...
USN-7835-5: Linux kernel (Oracle) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...
USN-7835-5 linux-oracle-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989485)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989485 advisory. In the Linux kernel, the following vulnerability has been resolved: aio: fix mremap after fork null-deref Commit e4a0d3e720e7 aio: Make it possible to remap aio ring...
x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()
...
Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: x86/iopl: Fixed inconsistencies in TIFIOBITMAP The function iobitmapexit is called from exitthread, when a task exists or when a fork fails. In the latter case, exitthread cleans up resources that were allocated during fork...
USN-7835-4: Linux kernel (HWE) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...
USN-7835-4 linux-hwe-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...