CVE-2025-14326 Use-after-free in the Audio/Video: GMP component

Use-after-free in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 146 and Thunderbird 146...

Mozilla -- Use-after-free

https://bugzilla.mozilla.org/showbug.cgi?id=1840666 reports: Use-after-free in the Audio/Video: GMP component...

Silicon Labs Gecko SDK 安全漏洞

The Silicon Labs Gecko SDK GSDK is an open source library from Silicon Labs. Combines the Silicon Labs Wireless Software Development Kit SDK and the Gecko platform into one integrated package. A security vulnerability exists in Silicon Labs Gecko SDK GSDK that stems from a malformed grouping atta...

Malicious code in sleepy-coral-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6aa97bd2e151bacb79b96414ee5f8a710a91208bc49c16b8e842ea40b7a2e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117091

Malicious code in sleepy-coral-gecko npm...

Malicious code in muddy_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44efbe5e11836f40d281009a1937f03ea208bd2a8ed109aeaaf3078f6dc9572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135593 Malicious code in muddy_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44efbe5e11836f40d281009a1937f03ea208bd2a8ed109aeaaf3078f6dc9572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frail_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4219cce9791fd7c2669dd34e41fc9978651dc9840ac3920d37fe04d068354690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29c4bb131cdff5e6bef837002a35c4da51994352b59663cfec6798321c1482e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125638 Malicious code in crooked_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e39daedd741125dbca2e77b6a7126455d0713d1818897bb3706e2e85b5352c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-105954

Malicious code in deafgeckoz3n npm...

MAL-2025-122513 Malicious code in plain_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c881dc115a4e05ef5fca917986e9a9fcdc2d750dfd5e6343255089c9dcf0856e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-88883

Malicious code in secretgeckoz3n npm...

Malicious code in broad_gecko-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c36f0b4469f454340ce2993d0a0ab63db877d5063112f63f8b99ac18f12757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76596

Malicious code in impossiblegecko-smiletea npm...

Malicious code in precious_gecko-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3c7f1d5542f6ad5f19beeabf22343fa0f1eb9feabc70097a159b8be8354d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78036

Malicious code in unexpectedgeckoz3n npm...

EUVD-2025-80260

Malicious code in traditionalgecko0xrequest npm...

EUVD-2025-80903

Malicious code in presidentialgecko0xrequest npm...

MAL-2025-98794 Malicious code in local_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0820db521179023701906ee185ca2a3e190acb673b9fbff7c7dab65e91984c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...