Malicious code in selfish_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18ff432316b541804e1b0265ab1467aa34b10638c04bccd169ddaeb4f04aa98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118646 Malicious code in agus-lumpur45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ea1451f6040df4f82879027e0b8b506e8e3e8fd78debbe850bea10d17dbdb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123340 Malicious code in sound_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41aa25ca51a8b350937ed927a7724322879a7881d9c5841eac02c7c80d048a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-gaplek88-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15c62ffcaef6574be8d6f57293eef59d91e0b9169316fc655f21517667b25a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Malicious code in kresna-botok39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fd5c8997fbb243718852fcc8de4224825dfd67204333692e6645e258d96a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-mangut34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3503ec957b3af35a63a873bc2fa1ef8990df2d5425794754127106d6d406b420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparative_fish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f606b88b3570d5f45ddb0ac16488f7553eed36fae3f6a5dadcfbfe05f33b6586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110230 Malicious code in urban_leech-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0dc80c4f4e86e1fc1ed861c288b907aefd75e3372da27c68f4002aff6135a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103505 Malicious code in hadianto-peyek97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d46e09361bba2a926c265374c536462f407897af5e22d038e1b5d8daca529dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-getuk13-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd6701c79a57f3be750bff1eaa7bb97ad1e8e59854320c62050cd8b08861da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85958 Malicious code in gita-kripik49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b88b563123121c427499334f63059d0b4084ddee5013c89ea3d6dee7ed840b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-soto68-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22ee55462b36df27b6bd42dda2329f65834df5e66b8fdbe3d875a09687808d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80560 Malicious code in parliamentary_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbc6fc3392d4bf45e212e5c4082be0182dcb8132bb52659aabb3e4111a5bf19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kue72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e7dde66d836f2f9d31c940dc0a41b6375e2da2100d56e7eb404b478fd7eeab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

SUSE CVE-2025-40109

In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure setent is always present Ensure that setent is always set since only drbg provides it...

MAL-2025-65181 Malicious code in rudi-keraktelor77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b14b695a821777a820ec90f8fd71b9f6c4a0cc7447ca85bcb43d1908030627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-soto97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cbd9191826777528d87bde9ce0ab426c101fb99ec0fa61e90e40e3042afe29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60032 Malicious code in blushing_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0900041636c4e012ef3e1b3839d1dc5f606808b3c56be1eee46d9ca21692658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...