MAL-2025-164061 Malicious code in parwo-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19113d261f6449cce929624357f567f6b496112f4842721b24b898aad3ca0946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161983 Malicious code in nasrul-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 092fd95b767a2fde418c7ff142720466d3d4884f48f7237fd2b122a44f3ad8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161895 Malicious code in nasrul-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44cfa30527b6f100bf5865aead3ee9470aa077ed22c1c2df6c21c6064f068108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159833 Malicious code in mansila-tiala-mdfghfalani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 668fe88cc29e363a0c048fe64ce385f321094a7fa0ef69f9575862a234701866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-s1aa2s-ra2fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d236ea11d4d39c2cf2ac757dee61f84355e4ddac0d044c53eb0c918bcf520c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159630 Malicious code in manda-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c67fbe7a4f8b638084e2af409bab3d7f493f61d9b604d3158517d7514d27c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164093 Malicious code in pilau-akaviu-kin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378047f5d90bcd7060fa530db42bc90045c9adbabfffa7234d262aa1f184b217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41118ae8bb72b7d3ba65c84bacfe9aea388e0338e18a38b9a50d2ec4ed38d80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154649 Malicious code in digo-kamoi-ailas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00cd29bc51669d9e3575efaf15990521a3cf7f243a8ca00ba26f702034850437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168532 Malicious code in tealove-nice6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb48aa5448e6c3fbf709d96eaee719fe9e5dbddfe56c1dc3347152c347c12123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64280

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

CVE-2025-64280

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

EUVD-2025-124966

In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Fix array underflow in pciendpointtestioctl Commit eefb83790a0d "misc: pciendpointtest: Add doorbell test case" added NOBAR -1 to the pcibarno enum which, in practical terms, changes the enum from an unsign...

UBUNTU-CVE-2025-40127

In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in kssarnginit Fix division by zero in kssarnginit caused by missing clock pointer initialization. The clkgetrate call is performed on an uninitialized clk pointer, resulting in division by zer...

CVE-2025-40117 misc: pci_endpoint_test: Fix array underflow in pci_endpoint_test_ioctl()

In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Fix array underflow in pciendpointtestioctl Commit eefb83790a0d "misc: pciendpointtest: Add doorbell test case" added NOBAR -1 to the pcibarno enum which, in practical terms, changes the enum from an unsign...

CVE-2025-40117 misc: pci_endpoint_test: Fix array underflow in pci_endpoint_test_ioctl()

In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Fix array underflow in pciendpointtestioctl Commit eefb83790a0d "misc: pciendpointtest: Add doorbell test case" added NOBAR -1 to the pcibarno enum which, in practical terms, changes the enum from an unsign...

Malicious code in buzz-invasion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a7617eda9ffa84bbc251331724293f7dffc8f255e37b2f026a2ce00f4fb5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141844 Malicious code in eager-aquamarine-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf13de1aa551bc22651a383030536d10cf1f8f16c43b6fef17e79218e66d5810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-proxima-apollo-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 639db0e0679b8beea23a06052662923a78a1aae3ece490953093f66a146494ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-uglify-js-stop-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cb747f817d3854691f2f4e78d85638306150ffa98f5d294bc280cfc35f51d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...