Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993088)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993088 advisory. In the Linux kernel, the following vulnerability has been resolved: mptcp: always handle address removal under msk socket lock Syzkaller reported a lockdep splat in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993280)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993280 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: piix4: Fix adapter not be removed in piix4remove In piix4probe, the piix4 adapter will be...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992838)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992838 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free of slot-bus on hot remove Dennis reports a boot crash on recent Lenovo...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992713)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992713 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/bridge: megachips: Fix a null pointer dereference bug When removing the module we will get th...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993295 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in atatdevadd In atatdevadd, the return value of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992768)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992768 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Fix use-after-free bugs caused by pn532cmdtimeout When the pn532 uart device is...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992953)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992953 advisory. In the Linux kernel, the following vulnerability has been resolved: coresight: Clear the connection field properly coresight devices track their connections output...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992854)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992854 advisory. In the Linux kernel, the following vulnerability has been resolved: jbd2: remove wrong sb-ssequence check Journal emptiness is not determined by sb-ssequence == 0 bu...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993021)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993021 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 driver core: Add allocsiz...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992828 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Allow waiting for commands to complete on removed device When a SCSI device is removed...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993104)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993104 advisory. In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Mark XDomain as unplugged when router is removed I noticed that when we do discrete...

Malicious code in chai-promised-chains (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0956a62fcaae7fb3ed4d8d30007bc025850ba1f4915e2a816c0602f6d24f2135 The package chai-promised-chains was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview vscode-azure-mcp-server is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview @ptest2535/artifactory-demo-ptest is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious Package

Overview @ptest2535/testpackage is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview @ptest2535/lwokermal is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-192979 Malicious code in @ptest2535/artifactory-demo-ptest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179d121743e4ae61b32780c6a0ea72f57b23796b21513e57f998da725dd49318 The package @ptest2535/artifactory-demo-ptest was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview bigmathex is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview shopify-app-react-router is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in rt-interactive-card-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9858817ec5f5e5af9db5f5033c3626e4214faa07e1169e950573bbca309a975e The package rt-interactive-card-collection was found to contain malicious code. Source: ghsa-malware...