EUVD-2025-53974

Malicious code in hilarious-rose-kangaroo npm...

Malicious code in likely-rose-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc2f663aebc7843bdb216108249a9ea241ddd81747759535160e2236e0e088b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53069

Malicious code in neat-rose-silverfish npm...

EUVD-2025-54687

Malicious code in elaborate-rose-bedbug npm...

EUVD-2025-52826

Malicious code in partial-rose-galliform npm...

MAL-2025-67884 Malicious code in dry-rose-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a486998b80948e010817fdc7e3c5ad31fb7acfe6695ec6ed3eb6a13b896d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67615 Malicious code in damaged-rose-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6864f956817e62d551e1ffdfa62e3f5f356d9fbf61e309f57844970eab6ed5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71134 Malicious code in thundering-rose-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672edcdbddf06ab83a7e9062bcb82a3db41c791e96b68e60f3ee399e1f14d04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71221 Malicious code in unable-rose-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7298374d8544f5faf21010e36db809189e2306a9b9330b323ee85be402c78776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69823 Malicious code in partial-rose-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ea2ed40996b8e41be803e7d2db7aa7183e5bb028d0e1b16d1ecf384f14eefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71780 Malicious code in zesty-rose-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb3413ebe94bb5df870e24d8eb4e8ad1bff8d5ab21c92aeb9b2f60fb147c087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69824 Malicious code in partial-rose-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 343240d70b59fc98ee209cb24eeffe9594148141d4ed1e07499c382b7020d268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69587 Malicious code in necessary-rose-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941da22e570bb4ece2c41326970134a0091f10af69c955913f6d2cd04696cc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69822 Malicious code in partial-rose-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27d0c49db0a7cdcb061529dfb3162ea69b486e060988006b840dff8ff846e2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67624 Malicious code in dark-rose-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110924f4ad37517588794a92f878d8c275c72159f5967ccb634e6cae118f9478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70196 Malicious code in raspy-rose-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4d4c77a8c91f0d229d4fba71f457026993679a350298256f2c5255a37936c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66924 Malicious code in balanced-rose-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d074f08c885d9b49e7ebd7a298cee46c28825eba28940ba3b4f861e8fd47aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69068 Malicious code in late-rose-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a3a49267017ecb787de2667b8ccfd34e0d22633c0246f4998eb4fdfd79d4a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990138)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990138 advisory. In the Linux kernel, the following vulnerability has been resolved: rose: Fix NULL pointer dereference in rosesendframe The syzkaller reported an issue: KASAN:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988696)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988696 advisory. In the Linux kernel, the following vulnerability has been resolved: rose: Fix NULL pointer dereference in rosesendframe The syzkaller reported an issue: KASAN:...