MAL-2025-92489 Malicious code in yanti-keripik43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0030006582eb88bf579b3989acf07e538720c1e3d7b21fcf45c8e1bc29258f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89834 Malicious code in qori-kripik48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955501724006d00a7f53e4d80d0f4aaa439f31a6be2a11d4aeb56b6163a964f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91332 Malicious code in udin-bakso32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df92f718d3a4139fe85c20985cfb569398df911b3c9e6cf28ef60947e11448d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85676 Malicious code in flying_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f216cd5658241ba3b7c703e3d01f780e8299f54476524430860505483718a6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-getas5-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07023aa1b5bf40bfb60f4cf9324dce21663387e1d86037d0129336b0fe501b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78396 Malicious code in gilang-gorengan40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e529d86ca76b402e8aceaf576267df217d983751281a4a3af61734bb0657de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78008 Malicious code in exceptional_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0870dcfca9b10ad8650e932cb74e1282ee7b4021beb380a5512686d86ef48634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-gudeg29-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df4b7c892b033b8b72051e5aae7237cf287fcd93c61e83f8ad89cfee92559d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75962 Malicious code in vera-keripik11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da73058ab7ac39e959b205f0abda24763ce520ade7df257f2077728cf394cc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical-red-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3d7405795dc54a69eab4fe2508cd7b65b613180af0cee665c3d8c64658e4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71524 Malicious code in weary-coral-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d549ad13e181b5c9e4be49b56e282f6223e26ec200e8fc704681876d614dff6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69097 Malicious code in legislative-brown-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66cdbada940e656239d1cd140eb1918b98e6eaa5aafb0a81edacf7e90cb7b0bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60612 Malicious code in holy_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4744bdc55e19d664a35d0d34c8d8efd72aab6bbaf3ef18799cab127db7abafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_ermine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c3b89cda8607982f093ec15166a03b212286de59599293445d3811f8b8b7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-lapis82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f525b9981207af1069c6ca6c84a6f0eb4a42a97e56d5e283faea2442dfa834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-mendut46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d90bb58136a1f573c6302d64289f9de858bbddebc9d6552cb5fa1a6f822e339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50141 Malicious code in citra-kupang33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222acc614cb9675e41602eba1c7c6f37b743641f47413b13d5b7bbe5eb4d743b The package citra-kupang33-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

btrfs_rename_exchange Heap Buffer Overflow DoS

The vulnerability of the btrfsrenameexchange function in the fs/btrfs/inode.c module of the btrfs file system support module in Linux systems is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988712)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988712 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check for inline inode Yanming reported a kernel bug in Bugzilla kernel 1,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989799)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989799 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check for inline inode Yanming reported a kernel bug in Bugzilla kernel 1,...