Malicious code in rita-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad2ec8b879033f7dc6a6341b21071ec9cb1de76a6de84fc69f85061606f2d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147020

Malicious code in uinsnu-lumi-kunal1ab npm...

MAL-2025-164895 Malicious code in rita-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0509daf36783b4947b97c54dca5e8c957776371502e21b8b3c866f8f2bf41f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146261

Malicious code in wulan-27 npm...

Malicious code in billa-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b438dff97b1b91b56a4cbf23275a91c04109dd130807ba03afa1a62611512d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fba029c8f94395a29474ad04f3ef7f1a54b05c57a5792f2181bd875104b59de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699c3ba31ceb97c2feebb3669628650377f004a7f9bdc1daa2106938d40d68bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c26c826170fba3a34b0251b1c073ff0bd3b75ed0b50639a445fd035c3a7b0f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc101ec4663e68ef24107519592ea234a3b5b21991e4aff4f3c177265fc0273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165248 Malicious code in ruji-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920d3854dd467640b5abc8cfcfba271f2094af379e35d5d2ba4ae98a24fdcfcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164604 Malicious code in ramadan-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb414a4e4f3400f26f913e17c2175030b1acc9ff3e98720adea013d3f61db31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154054 Malicious code in cinta-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19d0e342ecb592b36912a009e9f3d90ccd3fc0a1076716cac9b08d0e194bf37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40147

In the Linux kernel, the following vulnerability has been resolved: blk-throttle: fix access race during throttle policy activation On repeated cold boots we occasionally hit a NULL pointer crash in blkshouldthrotl when throttling is consulted before the throttle policy is fully enabled for the...

CVE-2025-40151

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: No support of struct argument in trampoline programs The current implementation does not support struct argument. This causes a oops when running bpf selftest: $ ./testprogs -a tracingstruct Oops1: CPU -1 Unable t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990860)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990860 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: pass u64 to ocfs2truncateinline maybe overflow Syzbot reported a kernel BUG in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990780)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990780 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: iforce - invert valid length check when fetching device IDs syzbot is reporting...

EUVD-2025-131944

A heap-use-after-free vulnerability exists in airpig2011 IEC104 thru Commit be6d841 2019-07-08. During multi-threaded client execution, the function Iec10xScheduled can access memory that has already been freed, potentially causing program crashes or undefined behavior. This may be exploited to...

Critical Photon OS Security Update - PHSA-2025-5.0-91-0676

Updates of 'redis', 'openjdk21', 'Linux-PAM', 'openjdk11', 'runc' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2025-5.0-0676

Updates of 'Linux-PAM', 'redis', 'openjdk11', 'openjdk21', 'runc' packages of Photon OS have been released...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990762)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990762 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: add null check of devmkmallocarray in fdpncii2creaddeviceproperties devmkmallocarray ma...