EUVD-2025-51612

Malicious code in tall-white-tick npm...

EUVD-2025-52956

Malicious code in occupational-violet-tick npm...

EUVD-2025-54267

Malicious code in foolish-aqua-tick npm...

EUVD-2025-55102

Malicious code in critical-moccasin-tick npm...

EUVD-2025-54898

Malicious code in different-coffee-tick npm...

EUVD-2025-54336

Malicious code in few-orange-tick npm...

EUVD-2025-54023

Malicious code in handicapped-apricot-tick npm...

EUVD-2025-50993

Malicious code in wrong-lime-tick npm...

EUVD-2025-52056

Malicious code in shivering-indigo-tick npm...

EUVD-2025-56055

Malicious code in abundant-azure-tick npm...

MAL-2025-68382 Malicious code in foolish-aqua-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf8a5339f4ea7c3b0dbd4aa60ebb29b871fa8911a1ed302d66b84a1d4a13eeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53466

Malicious code in little-gray-tick npm...

Malicious code in abundant-azure-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c4b42d74498f314fe1a7e89097f1ae108339e5eddeb9a45777953b4fa63af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68313 Malicious code in few-orange-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b1c8c3eecab41b696b86851346ecfac37e182f047f9bfc77c977d371e2f587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f542971b5f5954a674616d1206253605e8d0402229823361f3e8aa14ba195bdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b14acaa347c849a37f01c08e223a4a433a5eff10675d0805aec9de9e9c769c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

The vulnerability of the tick_ctx_cleanup() function in the drivers/gpu/drm/panthor/panthor_sched.c file of the DRI support driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the tickctxcleanup function in the drivers/gpu/drm/panthor/panthorsched.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990497)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990497 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/i8259: Mark legacy PIC interrupts with IRQLEVEL Baoquan reported that after triggering a cras...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989126)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989126 advisory. In the Linux kernel, the following vulnerability has been resolved: tick/nohz: unexport init-annotated ticknohzfullsetup EXPORTSYMBOL and init is a bad combination...

⚡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & More

Cyberattacks are getting smarter and harder to stop. This week, hackers used sneaky tools, tricked trusted systems, and quickly took advantage of new security problems—some just hours after being found. No system was fully safe. From spying and fake job scams to strong ransomware and tricky...