MAL-2025-185185 Malicious code in sonic-oig-tmoerocneauaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e750d62585919a24f07184257b851f20b1a9ad55a634e42a7cadae3c1bd19f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183422 Malicious code in lobac-ubb-avigiyagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b3125099a106cee39ad0e7069d3f752dc4c58083216fb71763accb99c0abcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182704 Malicious code in inda-fodja-guga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f3cfb3ea05c3c2bdfba514a76137476045ed9d63cb57dfedffffc9552bf4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185011 Malicious code in sonic-koig-tmoca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9120dcc41dafaf7ce6084ce003f1117a20fdd8c36bf6893787b6dbd6c59d7ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183033 Malicious code in itale-dci-rsut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f59037123ba81021da96e44f6141e4b275f3c9a42d850dcd46dadacc05709677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183598 Malicious code in lomi-ifus-ugofalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e49f85980110fcabf1d130f5057ea19c66934c1cbcf05a3dc59c95fd1ec28d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181938 Malicious code in flights-ilutg-iduhihsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed9d4423450d9581599e3d302c80b2e9fb1dfd097fbd62dcdfe93d0bc52a47b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181668 Malicious code in astam-ift-digokiuaiasnla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a6d69144d7114952ef7c1454e7a122397b80f1ca4e093a13f81d6d383009f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183931 Malicious code in mitali-dn-olikua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e28cd82951311bf0b4629cba9e4d28103d778d456a78f726d490b298d753d3fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182336 Malicious code in imodiov-kofi-cuicn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f730898a07eca5561950cd74f7ead0724bd6756a10383ba3a4af731b8a3e3bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183296 Malicious code in kiudt-acavog-fafiufug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c0ebd2c1e6d9fcf3738cff65387dab6ad9671f71575a8d13a06f8491e6d571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40183

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

UBUNTU-CVE-2025-40183

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

CVE-2025-40183

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

CVE-2025-40183 bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

CVE-2025-40183

CVE-2025-40183 is a Linux kernel in-kernel bug in the eBPF networking path. The issue stems from the metadata_dst object allocated for vxlan-decapped traffic when using bpf_redirect_neigh(), which could leak because an existing dst entry was not dropped before attaching a new one, leading to pote...

CVE-2025-40183 bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

Malicious code in cewe2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61da6f7ac2cc31c818c1789be09f08acda2f315a0bd2d0679302512c22f61d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ef860a595e2bcc8403080b8dc9a468bb4d036f2d1fc7f4cc7c1517db6b1788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181172 Malicious code in @akunsansan0/batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1cf888bacb59b261071db98dc593fd125d0fbd167435319ed732690e7843cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...