MAL-2025-69518 Malicious code in mutual-tomato-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 771d66fbf6fcd72ddc3198e742cb9c5526a336ff4af02f2bfee042a78d03c8c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70513 Malicious code in selected-tomato-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c818ef8c96f71b5bd5f5e247edb25ca30cbff584daa0107d3a581eb908e924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52240

Malicious code in robust-tomato-shrimp npm...

EUVD-2025-54345

Malicious code in female-tomato-kangaroo npm...

EUVD-2025-51190

Malicious code in violent-tomato-nightingale npm...

EUVD-2025-55888

Malicious code in amateur-tomato-pony npm...

EUVD-2025-54755

Malicious code in due-tomato-pigeon npm...

EUVD-2025-54446

Malicious code in extreme-tomato-sheep npm...

EUVD-2025-51711

Malicious code in sudden-tomato-baboon npm...

MAL-2025-70696 Malicious code in smiling-tomato-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28ad0c551330fa2445de8ff8aa8d40a6369fd92527a45dcc331f9987013f88e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55927

Malicious code in alert-tomato-roundworm npm...

EUVD-2025-55511

Malicious code in certain-tomato-goose npm...

EUVD-2025-53131

Malicious code in mutual-tomato-platypus npm...

EUVD-2025-54344

Malicious code in female-tomato-swordfish npm...

Malicious code in horizontal-tomato-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca73369bf60dd7256664f099758550acca0a6313f2130ec36fcf7ea078642af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52233

Malicious code in romantic-tomato-pheasant npm...

EUVD-2020-0607

Malware in sbrugna...

UBUNTU-CVE-2024-35921

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix oops when HEVC init fails The stateless HEVC decoder saves the instance pointer in the context regardless if the initialization worked or not. This caused a use after free, when the pointer is freed i...

CVE-2024-35921

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix oops when HEVC init fails The stateless HEVC decoder saves the instance pointer in the context regardless if the initialization worked or not. This caused a use after free, when the pointer is freed i...

CVE-2024-35921 media: mediatek: vcodec: Fix oops when HEVC init fails

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix oops when HEVC init fails The stateless HEVC decoder saves the instance pointer in the context regardless if the initialization worked or not. This caused a use after free, when the pointer is freed i...