MAL-2025-161713 Malicious code in nach-suck-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ceb1ad51888d7ff2f12161d6b80705cee7921cccdb0b082dfb539fa8f1eba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166927 Malicious code in teagood-lokika60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a037d05218e18dc0f7b8897b0502293990f4dde0320585ceffecaf0f44d37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167448 Malicious code in teagood-nalikami48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39497b012a854d9146fd35ce8765f0cf3cbe02faa1243f9bf830f8f4532f1263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166956 Malicious code in teagood-lokika87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff94c156c50bc20ca85e81962fa04191721d0c8dfbc36af2de8037c52dd2e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165932 Malicious code in siregar-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518d0f9e127243fad8e80a3b916a0e68d0b175194fb82cb356e9b2805453a79d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151674 Malicious code in abyil-nionai-lasuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26a857d83c5e972daa63630bb53eb230d18c82fd32695fc2cd27f3b20b7cba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167470 Malicious code in teagood-nalikami68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6411f5f189b89210b40685345d39ca6f6a8d8032ae5b258ae4c38fd02ed3fa5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167021 Malicious code in teagood-lokina55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c23b263e656c5643c50aeb1ba6243cdce8606ecf4a1dcfc1b85325345bcdc04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152703 Malicious code in angin-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa54d548b553e543feca31f2c2fc5f6666db7d6220604cf6b489101f97d8801c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159136 Malicious code in mahnud-unofoi-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39500c8596f3f141a7e7dd38e551e5f8a61eed4ab6b226f881768b41856360f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: iomap: iomap: fix memory corruption when recording errors during writeback

In the Linux kernel, the following vulnerability has been resolved: iomap: iomap: fix memory corruption when recording errors during writeback Every now and then I see this crash on arm64: Unable to handle kernel NULL pointer dereference at virtual address 00000000000000f8 Buffer I/O error on dev...

kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy

In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfsmdtdestroy In allocinode, inodeinitalways could return -ENOMEM if securityinodealloc fails, which causes inode-iprivate uninitialized. Then nilfsismetadatafileinode returns true and nilfsfreeinode...

EUVD-2025-124952

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix peer lookup in ath12kdpmonrxdelivermsdu In ath12kdpmonrxdelivermsdu, peer lookup fails because rxcb-peerid is not updated with a valid value. This is expected in monitor mode, where RX frames bypass the regular ...

kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy

In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfsmdtdestroy In allocinode, inodeinitalways could return -ENOMEM if securityinodealloc fails, which causes inode-iprivate uninitialized. Then nilfsismetadatafileinode returns true and nilfsfreeinode...

UBUNTU-CVE-2025-40131

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix peer lookup in ath12kdpmonrxdelivermsdu In ath12kdpmonrxdelivermsdu, peer lookup fails because rxcb-peerid is not updated with a valid value. This is expected in monitor mode, where RX frames bypass the regular ...

CVE-2025-40131 wifi: ath12k: Fix peer lookup in ath12k_dp_mon_rx_deliver_msdu()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix peer lookup in ath12kdpmonrxdelivermsdu In ath12kdpmonrxdelivermsdu, peer lookup fails because rxcb-peerid is not updated with a valid value. This is expected in monitor mode, where RX frames bypass the regular ...

CVE-2025-40119 ext4: fix potential null deref in ext4_mb_init()

In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential null deref in ext4mbinit In ext4mbinit, ext4mbavgfragmentsizedestroy may be called when sbi-smbavgfragmentsize remains uninitialized e.g., if groupinfo slab cache allocation fails. Since...

kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy

In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfsmdtdestroy In allocinode, inodeinitalways could return -ENOMEM if securityinodealloc fails, which causes inode-iprivate uninitialized. Then nilfsismetadatafileinode returns true and nilfsfreeinode...

kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy

In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfsmdtdestroy In allocinode, inodeinitalways could return -ENOMEM if securityinodealloc fails, which causes inode-iprivate uninitialized. Then nilfsismetadatafileinode returns true and nilfsfreeinode...

Malicious code in superagent-build-eris-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906ce772c225466bc53a40615b5f32b6037636043160eb815b1653bf3675135e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...