MAL-2025-143023 Malicious code in gravity-dotenv-safe-quark-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46743d185d3cb8c0ab240e5bd2abf54d2e9eed58e86663014e8e9ec32d58bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142992 Malicious code in got-uninstall-dotenv-safe-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49759109d1cc0acaae0d1c9cb915f880b6b52ed3d85f7b976f092eaec0eb2d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147449 Malicious code in rimraf-dotenv-safe-wasat-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccf289cbd205a33d2d44a901a7c9891a58d1e2ea2e6bcbdfbbeecc2e82fd0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114363

Malicious code in dotenv-safe-cluster-hermes-sqlite npm...

Malicious code in dotenv-safe-postgres-perseus-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118c548fba36106c65ab5a4047e37654324785d2a7b091b8c04a743d9c47bc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141748 Malicious code in dotenv-safe-development-command-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c16cfd842e8cb52469e8ea8f152f3e7626745060a732985a6a98d9c59f8271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-dotenv-safe-centaurus-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66161950d798694a8d3a460e3a9c61d935e3555d346a161be2e76abebb5681ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11756

Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

kernel: idpf: check error for register_netdev() on init

In the Linux kernel, the following vulnerability has been resolved: idpf: check error for registernetdev on init Current init logic ignores the error code from registernetdev, which will cause WARNON on attempt to unregister it, if there was one, and there is no info for the user that the creatio...

EUVD-2025-75755

Malicious code in safeclam-teagooddev npm...

EUVD-2025-75753

Malicious code in safequokka-appteadev npm...

MAL-2025-108333 Malicious code in safe_porpoise-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56495f3f6bb44aaa642203075ddea7af1f6a9a26c22c93ae9a690a95e2ef380c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in safe_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1adf00a281321d10702ec9729e71843eabe528d2290a2d27fc86cdc79a9028cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80648

Malicious code in safetyrannosaurus0xrequest npm...

EUVD-2025-68102

Malicious code in safejaguarz3n npm...

EUVD-2025-73855

Malicious code in safemolez3n npm...

EUVD-2025-52193

Malicious code in safe-yellow-swan npm...

EUVD-2025-57845

Malicious code in peculiarmacawz3n npm...

Security update for chromium (moderate)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20027-1 Rating: moderate References: bsc1252013 Cross-References: CVE-2025-11756 Affected Products: openSUSE Leap 16.0...

Fedora 42 : cef (2025-313f6d7702)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-313f6d7702 advisory. Update to 141.0.7390.122 High CVE-2025-12036 chromium: Inappropriate implementation in V8 High CVE-2025-11756: Use after free in Safe Browsing High...