Malicious code in oktafian-martabak91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5386191d6e8cd1e0747344299f543de6621107b909f4c065d948608bef9dc10f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-kue91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48645a606037c82eb03d0cdba8d4d374ecd25d54455a3fe278b3d36bc630d5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74412 Malicious code in maya-nasipecel51-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494e8f065c8d1b17a6553afbb411ee781d5eadc74e3622cd17965e95224d1739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant-apricot-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad842ebb3fc7d678631d2a6e474070faf44e64828321f29659cf571412b7242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68943 Malicious code in intense-salmon-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beeebe3ca6db3b7fa38b4048823bab421cfaf238345260268ea12bdeff2fe28f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical-aquamarine-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64482e0adb352d7d09cf79aba8eeb20c513d1bfa891655b4e188668a5fc0aa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-brongkos25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea50adcb290c9fa7858acf9a1ae8c04abc3eb878a2337df5747a2621be48eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64385 Malicious code in nadia-buburayam51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8cba47d5bed1917dbae0d59417ccca8dbc27333a3f85ce9cbcaf1adaecfbef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65181 Malicious code in rudi-keraktelor77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b14b695a821777a820ec90f8fd71b9f6c4a0cc7447ca85bcb43d1908030627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726f2496a89f56cb4e23935b893ed52db6d2b3c2c0388b2c86281ec02c830530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-ruwet38-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce1dd6c2b974fd4951f93d6517cdbd620d642792324f958dcbf494bd185e313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58978 Malicious code in tomi-ragi66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf57821b412e81f774a89515f34fd90fbe71ed6399b0c04417ccf0cefdf8d971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58237 Malicious code in putra-toge19-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1c9ec9976885ab30ab77f9974303cb7d826f3ff08116d0249e6d8728eac256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-donat55-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d055865d12341de279a710122fed67aaf3a0a2eaae211454ac889dd39ded264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53034 Malicious code in joko-sroto98-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd36a94f167d63fb2f250a2e1a05f102882a31c6e1a3549138ddf0440bc13bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-jamblang33-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad3872ebf5ed10cc9732290e8eccf2d7a423a5278cda2e336bacdad17f48745 The package bella-jamblang33-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50057 Malicious code in cici-martabak15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f769568555dceff4d0d9ae11332c8b6222c702a96270be6db65257f5f9fe15d The package cici-martabak15-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

SAMSUNG Smart Switch 安全漏洞

SAMSUNG Smart Switch is a data migration tool from Samsung South Korea. A security vulnerability exists in SAMSUNG Smart Switch versions prior to 3.7.68.6, which stems from a lack of randomization of the secretKey and could lead to an adjacent attacker accessing application backup data...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: MIPS: Do not crash when calling stacktop for tasks without an ABI or vDSO. Not all tasks have an ABI associated with them, or a vDSO mapped to them. For example, kthreads never have such an ABI. If such a task calls stacktop, it...

SUSE CVE-2025-40063

In the Linux kernel, the following vulnerability has been resolved: crypto: comp - Use same definition of context alloc and free ops In commit 42d9f6c77479 "crypto: acomp - Move scomp stream allocation code into acomp", the cryptoacompstreams struct was made to rely on having the allocctx and...