MAL-2025-113640 Malicious code in empirical_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edc28b113fb0fbbf11da7ca4862a2c034a6be31121623f25eb751c4e4763cb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117712 Malicious code in utomo-bubur10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1f2aa7a94f72279231895807a9f1ee26dbe063e36176a219db037ca1e536e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117849 Malicious code in vida-kue67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9b5a443b8c8a07b27c0d12727b0db453ec50b530f9cd8503296c8d1eb79f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117144 Malicious code in siska-tahu84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27910e0625e9f6f926ddf1bdd84bffd8b4c0ba03a206ba529c6bd83c953d9b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113200 Malicious code in condemned_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681d376eb0e8d88d65b29b8203a3d264b0e29285b075cb984a8c797688ced070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112989 Malicious code in candra-toge50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f89507a54dd36f020468e782305702664c03fa3b8f4f6e52024f385b5bd3f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113277 Malicious code in delicious_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078f760ca5c1872a0f74ec1ab8a6fe2b889b5734acf8caf8183801cf5d9d8ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113077 Malicious code in cindy-kue27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc4633d21e27c6a302fe2186ed204a75b70811b585ecf498fc65f14e101e764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112608 Malicious code in agus-oblok5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b04f25335367048b0859c1b516141f776e74256bfb4577a7d4adda843c07a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117520 Malicious code in tomi-tomat9-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b628216b6c815bfa579977ef35d9dee5eaeb625b58aa177ef2b89a7823e09891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115658 Malicious code in mahesa-kue77-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a916e58e454c631a697a30dbb67aac56023a0f03f8003eccd7fbedea366f8510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113365 Malicious code in dewi-nasi69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9717e8d7a2c62533e1b7dd262ba107c0677153de456255b9cb8b30566fea022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114270 Malicious code in gita-jus32-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1590cb27379c8ccc6d57f038f3909b023f4a3f46cdee6e9f5f7b2cf3a5e9a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113502 Malicious code in eastern_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72424590b3051e9dbded49b2b76111535d7311adbed8e3ad39bb235d46781ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12436

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Medium...

kernel: idpf: check error for register_netdev() on init

In the Linux kernel, the following vulnerability has been resolved: idpf: check error for registernetdev on init Current init logic ignores the error code from registernetdev, which will cause WARNON on attempt to unregister it, if there was one, and there is no info for the user that the creatio...

kernel: RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5pollone curqp update flow When curqp isn't NULL, in order to avoid fetching the QP from the radix tree again we check if the next cqe QP is identical to the one we already have. The bug however is that we are...

Malicious code in daily_worm_magenta-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d10d956b2a03a8d770007e1e5505f24b76365470cbfae853a74c592cf9377e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vivid_peacock_amaranth-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4824760ad3bc8cc3c1a06c302302915baab444c685297e1f61ade67dc805411c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_quail_white-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6085bbfee70ecfdb2261c938c51c9e6e9a484833621689b29a6068fc07564164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...