Malicious code in kisut-diug-danamifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb20452999aa36e5ef281feaab238e85e6deeb888fc707fa8047ecaadf8711a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184870 Malicious code in sonec-kat-fgfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a832ed9f5989ac9ebf09a92688ff51f717a666b43aa7259c907396ddb6b5ff53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185322 Malicious code in tunis-kt-gahvfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c871235e4abad00191fcae3c240fc0421804b1f99ed7e4bdf10de275f2060ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184752 Malicious code in one-kat-ibudavafrufdaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e54d0b2aece1cd2107626f8ac0bce18b7fa78b6c41d1012cc928aef315f08aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183340 Malicious code in liobc-ug-aag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d1eff92455378f34d0e5e4541bc3992cba06772b6bcc31bf716ea2d60eea57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184270 Malicious code in modiov-khan-avcafivaivuvagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955ca1801c8ac5b7aa33c3cf1cb37f6426721a5650a691244eb35f23ddf73277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181815 Malicious code in avangs-olims-noliadsdsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb4713b01c79cdde264b26af63a1d04c523827c497b02395299696b6a057509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182733 Malicious code in inda-foi-gisagan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6585bfcfd782529ce29e23ab33fd1976808031f2b1245463c95e3f032f29b45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PYSEC-2025-112

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

DEBIAN-CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

AZL-70103 CVE-2025-40197 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

UBUNTU-CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

CVE-2025-40197

CVE-2025-40197 pertains to the Linux kernel media: mc driver where the minor number is cleared after device release, which could mismanage device lifecycle. The vulnerability is fixed in the kernel by clearing the minor number before put device, as noted in the advisory and linked kernel commits ...

CVE-2025-40197 media: mc: Clear minor number before put device

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

CVE-2025-40178

CVE-2025-40178 affects the Linux kernel. The issue arises when task_active_pid_ns(current) returns NULL, causing a NULL pointer dereference in pid_nr_ns and triggering a kernel panic. The description states the fix as adding a judgment for a null ns in pid_nr_ns, addressing the NULL-pointer path ...

Malicious code in gntc_94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b361b241a353cce33e3df6a9c52d2054202e85937c822b65f8b096a8f4e4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181519 Malicious code in roti13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bff30ecf8de84fa98fefe9617c7acc1b424e8c5328ed7551e432ba8c22e61cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181467 Malicious code in cewe14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb6d54224554ffbb5bbd360c1dfe3b6b3dfbd3f85150047bb65d8679eee6eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...