CVE-2025-40168 smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().

In the Linux kernel, the following vulnerability has been resolved: smc: Use skdstget and dstdevrcu in smcclcprfxmatch. smcclcprfxmatch is called from smclistenwork and not under RCU nor RTNL. Using skdstgetsk-dev could trigger UAF. Let's use skdstget and dstdevrcu. Note that the returned value o...

CVE-2025-40154

The CVE-2025-40154 entry concerns the ASoC: Intel bytcr_rt5640 driver. The vulnerability arises from an invalid quirk input mapping; when an invalid value is passed, the driver previously reported an error but retained the input, potentially causing out-of-bounds (OOB) access. A fix in the Linux ...

EUVD-2025-114361

Malicious code in dotenv-safe-development-command-non-blocking npm...

EUVD-2025-114365

Malicious code in dotenv-safe-astro-supervisor-blitz npm...

EUVD-2025-114337

Malicious code in dotenv-safe-protractor-bellatrix-janus npm...

EUVD-2025-115810

Malicious code in callback-bellatrix-dotenv-safe-nextjs npm...

Malicious code in eris-nightwatch-axios-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbbeee471022a3f37436f04cb109e877e4866d40b6368dc49dd3f4aac44dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116197

Malicious code in barnard-dotenv-safe-elara-registry npm...

EUVD-2025-122496

Malicious code in reveal-md-transform-miranda-dotenv-safe npm...

EUVD-2025-121195

Malicious code in tool-dotenv-safe-deimos-magellan npm...

EUVD-2025-113932

Malicious code in eris-nightwatch-axios-dotenv-safe npm...

EUVD-2025-123642

Malicious code in playwright-cressida-rehype-dotenv-safe npm...

EUVD-2025-112572

Malicious code in impulse-dotenv-safe-prompts-miranda npm...

Malicious code in leda-koa-dotenv-safe-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808c73d9e9f389030423bb79948118805a5bdf318cf7822ce009acc6fb93fa32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114072

Malicious code in enceladus-toml-dotenv-safe-aether npm...

EUVD-2025-114352

Malicious code in dotenv-safe-kronos-aurora-build npm...

Malicious code in spectron-dotenv-safe-titan-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e48c87ef5045bc4ffe85b3fe5f47863ca0f4efdf3a56a18800accf41a3c842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111787

Malicious code in less-loader-pino-dotenv-safe-quark npm...

EUVD-2025-120388

Malicious code in wolf-comet-dotenv-safe-element-ui npm...

Malicious code in dotenv-safe-transport-corvus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...