22717 matches found
UBUNTU-CVE-2025-40127
In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in kssarnginit Fix division by zero in kssarnginit caused by missing clock pointer initialization. The clkgetrate call is performed on an uninitialized clk pointer, resulting in division by zer...
CVE-2025-40117 misc: pci_endpoint_test: Fix array underflow in pci_endpoint_test_ioctl()
In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Fix array underflow in pciendpointtestioctl Commit eefb83790a0d "misc: pciendpointtest: Add doorbell test case" added NOBAR -1 to the pcibarno enum which, in practical terms, changes the enum from an unsign...
CVE-2025-40117 misc: pci_endpoint_test: Fix array underflow in pci_endpoint_test_ioctl()
In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Fix array underflow in pciendpointtestioctl Commit eefb83790a0d "misc: pciendpointtest: Add doorbell test case" added NOBAR -1 to the pcibarno enum which, in practical terms, changes the enum from an unsign...
MAL-2025-141844 Malicious code in eager-aquamarine-aardwolf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf13de1aa551bc22651a383030536d10cf1f8f16c43b6fef17e79218e66d5810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in buzz-invasion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a7617eda9ffa84bbc251331724293f7dffc8f255e37b2f026a2ce00f4fb5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cli-axios-kronos-ophiuchus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2413779045c418af087351212834783d69a8389228185a86a1f61636e99c15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nebula-dactyl-meissa-postgres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fadf6c26d618a6dc56352d25d762925947927db5f5ea0134c63e3dbdf0bb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in weywot-nightwatch-parcel-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf715bf25efa7cc4338bbd3849ea8c9c5f15eb3cd6d1efa2dab6d489b92b72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sync-wasat-deimos-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b928c8b1e23b0ca5a42a3df176fa0f9a12482797e409ce6bc09d1a8c0636ca86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in electron-builder-package-remark-wasat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc18aa99ef75cba88fde8f564a276ae4df269c350baee22f312d7bef7dde888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in javascript-scorpius-global-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a295c603b76a38d618d9f50be6f6317eb946aa55b04eefa49bfe10b3e03fc9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in meteor-semantic-release-inquirer-pegasus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d1b5167b18e8d059fdc524c027f92ebfb7134ffd5ec7a564dea081c41e2869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in xenos-library-virgo-weywot (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403478779c33351d238232dcc3fdb2b77802c9afaa62025f5fd8fa6a8d1ae546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in json-backend-cluster-webdriverio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 137494e90d691d103e85bb0225ed5872324f19293c8693136a7256c055113dba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nuxtjs-perseus-frontend-callisto (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c44ddb54da7f022b1b6f280a4dd839cc0ae8b15a6102fdd27314d0308c08085b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in test-process-phoebe-rehype (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedfd081163c847f1ff863e159d9200b21691d531407c7984a579bedb9e7419e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in arcturus-aquarius-corvus-dependencies (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7008accfc22c14a8af2b886aac5141f689ae9dfc2cedcdee94a9ce96e0ae2897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in halley-framework-xanthus-tailwindcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9424fa3fa842a5316d32f3fef4b6332332febc04af137268f22f13e138b7869a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cors-spinner-firebase-radiant (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d50d2148eb02e8dee26102481118cc6dce36328fb9fb1b5c7f2a72b52d384d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
