Malicious code in kisut-diug-danamifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb20452999aa36e5ef281feaab238e85e6deeb888fc707fa8047ecaadf8711a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184870 Malicious code in sonec-kat-fgfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a832ed9f5989ac9ebf09a92688ff51f717a666b43aa7259c907396ddb6b5ff53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185322 Malicious code in tunis-kt-gahvfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c871235e4abad00191fcae3c240fc0421804b1f99ed7e4bdf10de275f2060ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184752 Malicious code in one-kat-ibudavafrufdaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e54d0b2aece1cd2107626f8ac0bce18b7fa78b6c41d1012cc928aef315f08aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183577 Malicious code in lomi-fus-uga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f461f247f76b7a3ddfa88fd0899201795776834054eaa8aae013f6ae95c911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183707 Malicious code in manu-oib-gisosaugaiug1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e52771ed39b52ef9a6db31976a79e8e949872fb85d9bcb2066ceb008e64fc48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183769 Malicious code in manu-oyib-gisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9687fc2b781d925ad39cab4086c5ae0f85992ad9695649ccd61a5af304b8ed33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183233 Malicious code in kisut-difg-diwfzcf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6824ad694f632a53fe9bd8ddcc46304432857abba528b704919ec53e87b6e561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184887 Malicious code in sonic-ijos-afh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52dab8981a3f6f493c8c7fb832a1520fa887b6450486664f13d5f3477dc6248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olikiakimua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770c469a13b0c0f8d96241abf67a40bc755482a41267266aa39363acbf2cf6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PYSEC-2025-112

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

DEBIAN-CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

AZL-70103 CVE-2025-40197 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

UBUNTU-CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

CVE-2025-40197

CVE-2025-40197 pertains to the Linux kernel media: mc driver where the minor number is cleared after device release, which could mismanage device lifecycle. The vulnerability is fixed in the kernel by clearing the minor number before put device, as noted in the advisory and linked kernel commits ...

CVE-2025-40197 media: mc: Clear minor number before put device

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

CVE-2025-40178

CVE-2025-40178 affects the Linux kernel. The issue arises when task_active_pid_ns(current) returns NULL, causing a NULL pointer dereference in pid_nr_ns and triggering a kernel panic. The description states the fix as adding a judgment for a null ns in pid_nr_ns, addressing the NULL-pointer path ...

Malicious code in @akunsansan0/karedok37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec41ca60a53945b53d95e51ea049918914f0071f4575b4a8a9c890ff6bd819df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...