MAL-2025-182666 Malicious code in inda-fodija-gf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45fe678312828b80956df96f554417487d1f7b6c1326808ca7e78f60ab9c8965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183665 Malicious code in mahnu-oy-gistsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 580c2a19d202109998de5c16fd76146b3dd4f2bc3d42ecdeaf88ab9cbae66e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185319 Malicious code in tunis-kt-gahuvfaduffadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee0d875b04d0a50b3e48ed7d8a366fd8b8c4a8addc70d46dc92d190d3e106af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182250 Malicious code in hitale-irhar-aaedde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4953703c6102ff493b3aea0c1e569395ded7238ffa6e424cc48d415d83e0b900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184885 Malicious code in sonic-ijos-afah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74fffe55b01a61bd9c33fabebaf37d622b6437b3f2020f1f447b4900caf6b3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181616 Malicious code in astam-ifit-dabtazai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad14d71565d5c52a364c64a455538124bbc4dfef36319d03c819e5041e55bd9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182099 Malicious code in gocay-guga-visagoijhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8ac2d0ee08d6f335aaf1b7fe7e8c89fd9e0c70ae5f08834ac28cd42a81a64e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PYSEC-2025-112

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

DEBIAN-CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

AZL-70103 CVE-2025-40197 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

UBUNTU-CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

CVE-2025-40197 media: mc: Clear minor number before put device

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

CVE-2025-40197

CVE-2025-40197 pertains to the Linux kernel media: mc driver where the minor number is cleared after device release, which could mismanage device lifecycle. The vulnerability is fixed in the kernel by clearing the minor number before put device, as noted in the advisory and linked kernel commits ...

CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

CVE-2025-40178

CVE-2025-40178 affects the Linux kernel. The issue arises when task_active_pid_ns(current) returns NULL, causing a NULL pointer dereference in pid_nr_ns and triggering a kernel panic. The description states the fix as adding a judgment for a null ns in pid_nr_ns, addressing the NULL-pointer path ...

Malicious code in gntc_94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b361b241a353cce33e3df6a9c52d2054202e85937c822b65f8b096a8f4e4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181326 Malicious code in @akunsansan0/pucuk12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b214b0cc1b7c6e26dd715953103a2c0c0bbe764a343f4e86757ea2b04b8bd77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf59e5b808b0358ac24f3b067217b9d9c11b610639413d35049141b0ee976e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4b0a1b5b7fd0152f065d078d7a699cad4e858c8dcfaba5bb42eda600fe4e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...