CVE-2025-40109

In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure setent is always present Ensure that setent is always set since only drbg provides it...

crypto: rng - Ensure set_ent is always present

...

CVE-2025-41731 Jumo: Insufficient entropy in PRNG may lead to root access

A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the...

MAL-2025-54863 Malicious code in sinta-lengko12-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693eedbc2bcdf8f5dd506efd145c3cb6d3a2730e2ad887e2c6aa3714c03fc54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54862 Malicious code in sinta-lapis9-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56e56b5edf5040b15e8b2a5e4a7710e8e34a188467dac8330b8654d5c6475861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-wajit92-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791189bf4129d7b657ecc2f07592ac966f91e4616ef5a6a2de16cb4111cf5146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-asinan11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39e48ae4ac8857a01e30ef169cb1c49ffbb6830f66820b68e1aaa66ba36698c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54453 Malicious code in putri-tongseng51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4df7872adbf16253d421800fdd19a6695b0ca16680fe076495618aa4ee4a69ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54510 Malicious code in qori-otak-otak46-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5097f4ebd8376f0c7948b6601b69950cc65ce4742fb0310568cc13f7ed9de6a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53760 Malicious code in iwan-ketoprak43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59cc7c64a7ee0a67dcb952cfeb29870b548154363e9d1d81e6c284f8ddac90da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54747 Malicious code in rudi-kue75-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464315488f6bf1e47997d7bc9adecd8b5694b5d8a86509bf13220342281b0aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-buburayam10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0da5af2a25b396ae286b2ad47a1e745f2a99451bd70f36f70ffa2086b33e555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-takokak86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea56eb29c777ce662274ddf58ded63748976a3c0ef89c20b2684f38aab6854c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-lapis23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1ca6ce7f2d80adb3e52ff1a6c39261adc5522de3abb1fbfc83a2f8c6ef3d0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54674 Malicious code in rina-bubursumsum37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd8ad1b76e3f7eb105e52e47298d7b263d38ff33e7fc7dedf5742f16a0eeaf10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-sambel67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a1cff9374e5c8fe51202fe889c70a2e5a133bf2e4ed6518b6a59fd5ab24ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lapis46-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aa1b11d8d8fbd05b807040f0ad7606bbdde4dc5767997a2db073197c77366f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-tongseng53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9f16b9d85ae74dea04c6cc7c168441ea5a8f1e874c117670291381191b8bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-tempe54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018fb053b98cd252486b2e93a227d4ec61f208b53b1669a896cf91eaaacf74ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54442 Malicious code in putri-teh65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8c8d3f6140ecc493e69dbff5c192b9a5cadbb54404a4e992201868ae5d8c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...