Malicious code in weird_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65d903462669b61a21a7df90e027cc3f9a96185ced672a8c8039e145b50d8aa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83043 Malicious code in agus-kue36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b671b7099072c074d248d1d5db7a69c6a310cf7fd3679d9cd3722019543e9b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76606 Malicious code in zaki-tongseng69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e406fe0a77917deac8829511438d86c26c3c7ea1617e9a49b1737fc9b4ccfb56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-tempe10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13849d616e73f6582818d9e1d3eabd9a5bbb9280d00375628aa52ecfb11ae5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61363 Malicious code in steep_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d173f5b238b8f2ba94de217745a32ec2d76138364f4d72e82876d2f8ef0d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-takokak8-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcc4fb8646b0c016cc1302c60b71bd6a99a86c30ad062653680ee2e99dda11f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

OESA-2025-2618 python-aiomysql security update

aiomysql is a "driver" for accessing a MySQL database from the asyncio PEP-3156/tulip framework. It depends on and reuses most parts of PyMySQL . aiomysql tries to be like awesome aiopg library and preserve same api, look and feel. Security Fixes: aiomysql is a library for accessing a MySQL...

OESA-2025-2619 python-aiomysql security update

aiomysql is a "driver" for accessing a MySQL database from the asyncio PEP-3156/tulip framework. It depends on and reuses most parts of PyMySQL . aiomysql tries to be like awesome aiopg library and preserve same api, look and feel. Security Fixes: aiomysql is a library for accessing a MySQL...

OESA-2025-2617 python-aiomysql security update

aiomysql is a "driver" for accessing a MySQL database from the asyncio PEP-3156/tulip framework. It depends on and reuses most parts of PyMySQL . aiomysql tries to be like awesome aiopg library and preserve same api, look and feel. Security Fixes: aiomysql is a library for accessing a MySQL...

CVE-2025-20725

In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20726

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20726

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20727

In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20725

In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20725

In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20725

In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20725

A vulnerability exists in the ims service of MediaTek Chipsets and Huawei IMS due to a missing bounds check, which can lead to an out-of-bounds write . This flaw could allow a remote attacker to achieve remote escalation of privilege if a User Equipment (UE) connects to a rogue base station contr...

CVE-2025-20726

A vulnerability exists in the Modem component (specifically associated with MediaTek Chipsets and Huawei Modem ) due to an incorrect bounds check that can lead to an out-of-bounds write (CWE-787, CWE-122). An attacker controlling a rogue base station could exploit this to achieve remote escalatio...

CVE-2025-20726

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20726

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...