MAL-2025-147991 Malicious code in slides-non-blocking-dotenv-safe-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0850f47bc6fffbed41e4a34730cecc0e53621b63abb4a3b3199ba5f61ad97ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143814 Malicious code in janus-jekyll-parcel-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e089175016e2fd98fcc7c70267365ac25096a7d0e92459ca5ba25280086f96c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141765 Malicious code in dotenv-safe-norma-hydra-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148785 Malicious code in transport-dotenv-safe-kinetic-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b8a22e012e02ef3e3bac4f30177cc000a714bfbb20f47e5f2752d82dad8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11756

Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

kernel: idpf: check error for register_netdev() on init

In the Linux kernel, the following vulnerability has been resolved: idpf: check error for registernetdev on init Current init logic ignores the error code from registernetdev, which will cause WARNON on attempt to unregister it, if there was one, and there is no info for the user that the creatio...

EUVD-2025-75753

Malicious code in safequokka-appteadev npm...

EUVD-2025-75755

Malicious code in safeclam-teagooddev npm...

MAL-2025-108333 Malicious code in safe_porpoise-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56495f3f6bb44aaa642203075ddea7af1f6a9a26c22c93ae9a690a95e2ef380c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in safe_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1adf00a281321d10702ec9729e71843eabe528d2290a2d27fc86cdc79a9028cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80648

Malicious code in safetyrannosaurus0xrequest npm...

EUVD-2025-68102

Malicious code in safejaguarz3n npm...

EUVD-2025-73855

Malicious code in safemolez3n npm...

EUVD-2025-52193

Malicious code in safe-yellow-swan npm...

EUVD-2025-57845

Malicious code in peculiarmacawz3n npm...

Security update for chromium (moderate)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20027-1 Rating: moderate References: bsc1252013 Cross-References: CVE-2025-11756 Affected Products: openSUSE Leap 16.0...

Fedora 42 : cef (2025-313f6d7702)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-313f6d7702 advisory. Update to 141.0.7390.122 High CVE-2025-12036 chromium: Inappropriate implementation in V8 High CVE-2025-11756: Use after free in Safe Browsing High...

Malicious code in safe_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 182b5880acb62506945c66e0ebd2401734467340df84564e45cb7cabaf920f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49439

Malicious code in safebuzzardz3n npm...

MAL-2025-61231 Malicious code in safe_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4a3a145efd4be7f83f7de8e1ff78a95be32e56469b8e8252abd91f04e23b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...