Malicious code in cici-oblok83-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c4e26f4fad1198297939c782cf44387e78d9ee5454b55a1bcf51d414e8faf99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e1e52e51e6ddaa7597454418b8dbc9bf9b28704b4e894839a3ba3295f7572a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86833 Malicious code in irma-teh53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 907ce915bb4ac8b7f8cbf1ce896b4d4796e91001e517e47b395aa116b23b5774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curly_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d22c3b1680c8dc98d829095a3b0e7d6904fe91601ea60eb55c51d601058e261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-esdoger64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3e95fc00f697b1e01f92bd92b2790233b675f7931260ffa00a5d980d8a83f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77532 Malicious code in dewanto-takokak82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d9d3287f8822eb0928b6f94121ea3a25344186f4dc325c13eff58a52f5eaab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76680 Malicious code in active_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17589211fb367ff637177f5d21bcace60c6a1c845154796df285f498113fb07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-sambel35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b956ee7177e3b09041aed20134280b83ad5ca23e97997d0b535b0f39df89ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72461 Malicious code in dewanto-sate48-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60ed8bb4ea57dfd3e36e73138388d1f8330a46d8fd229347beea2458480325ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-turquoise-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f09af885d3bffbf8778bc41d2e38b029a37c62295ef69c07b3fb4bbd10806dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2af21cb49e87d6e85870f34baa951d984e57ecbd97151ae2b50a0e62f93f22f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fresh_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b41681daa6a9bede3d95df4f8b4ea2bd34a557d8c87afa1133a81195896e773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57268 Malicious code in kurniawan-mieayam73-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d79e8db814e89ab419ea67073a9d6ecde6b14c65e5601b938ddb8608d5211d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53444 Malicious code in nadia-toge2-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e9ee82895214e23f57b0a923c42310e027c2c9e4dad996b327d04c054c8a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51831 Malicious code in fajar-mangut61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32aa55042889d0042a7a4f0ab7b968ba58df284820aa9e56fba5a624884d934c The package fajar-mangut61-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

EUVD-2024-1482

Malicious code in bioql PyPI...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure of the synclinkedregs function in the bpf subsystem to preserve the subregdef flag, which could le...

openSUSE 15 Security Update : coredns (openSUSE-SU-2024:0319-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0319-1 advisory. Update to version 1.11.3: optimize the performance for high qps 6767 bump deps Fix zone parser error handling 6680 Add alternate option to forwar...

UBUNTU-CVE-2024-32020

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, local clones may end up hardlinking files into the target repository's object database when source and target repository reside on the same disk. If the source repository is owned by a...

CVE-2024-34350

Next.js is a React framework that can provide building blocks to create web applications. Prior to 13.5.1, an inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses...