MAL-2025-114558 Malicious code in hanafi-serimuka21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0dde7934eb8bd43448eea58c4278b02c386b40f28750667e14f2b8758c2fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115786 Malicious code in maya-mendoan69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe422cc829370817ee0311bdcff44660c389b86fecc9d9108bf5de2eabc5e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117860 Malicious code in vida-oncom54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f0bfc01761a56d3555b4046f9115ea114c090221011d619e8cc9c8ae7900be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115646 Malicious code in mahesa-esdoger44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64eb2441cb10c990f7e7fbf526b92b1115199b8387aef96fb98619a6d63dd941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115206 Malicious code in kresna-lepet82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c76b3cc68014d2a36028a49ca032b1eab04d4721a5c360a6d9eaf100fad08bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115425 Malicious code in light_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126775fb1a278cb3f185cd8fac2c1dcefb99c24c4ef27f82dde879139e89e4ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112989 Malicious code in candra-toge50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f89507a54dd36f020468e782305702664c03fa3b8f4f6e52024f385b5bd3f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117878 Malicious code in vida-tempe43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1b2b84534a0c7c9b78bcb5e0038c40cad1e873c62c52a588a684422d60a5e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114104 Malicious code in funny_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98034728c7bb35bf14423886f56f79c35e2420f6d91e1bd6a21e94acd0844a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117607 Malicious code in udin-tek3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a267990633e70275819dd859fdef05a78371cd1ca1f4fc6403409f95e58ec06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

libtiff: Libtiff Write-What-Where

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controll...

Security Bulletin: IBM OpenPages Vulnerable to Information Disclosure (CVE-2025-27368)

Summary Application API vulnerability that exposes metadata for configurable fields due to insufficient access control checks in IBM OpenPages has been addressed. Vulnerability Details CVEID:CVE-2025-27368 DESCRIPTION: IBM OpenPages is vulnerable to information disclosure of sensitive information...

kernel: zram: fix potential UAF of zram table

In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zrammetaalloc failed early, it frees allocated zram-table without setting it NULL. Which will potentially cause zrammetafree to access the table if user reset an failed and uninitialized...

kernel: zram: fix potential UAF of zram table

In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zrammetaalloc failed early, it frees allocated zram-table without setting it NULL. Which will potentially cause zrammetafree to access the table if user reset an failed and uninitialized...

kernel: ring-buffer: Validate the persistent meta data subbuf array

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subbuf array The meta data for a mapped ring buffer contains an array of indexes of all the subbuffers. The first entry is the reader page, and the rest of the entries lay out the...

Malicious code in independent_tortoise_crimson-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5ceffac9acf6acb1db2e19a0aca361ace0e7cb3d5afaa771a518a35868e4ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearling_gecko_amaranth-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e161a370620d33a7bef5cdaa9876e7eddd5d7dd15391d5af0cdf3f5dde20de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111997 Malicious code in ideal_crocodile_blue-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbe37fd8090781a3917f769fac7452ff529d0dad306029ac9cac0a7e5e407d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111652 Malicious code in agricultural_bison_lime-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c25311427d85f79d141546a304f1aa13d5af28c99a64951c8173d8ed9770481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111883 Malicious code in external_sheep_bronze-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1984bdb68784d43e640e356c5677a54b2cd0edb6555d5238a06bc790caef9fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...