PT-2025-54445

Name of the Vulnerable Software and Affected Versions AA-Team Amazon Affiliates Addon for WPBakery Page Builder versions n/a through 1.2 Description An issue exists in AA-Team Amazon Affiliates Addon for WPBakery Page Builder formerly Visual Composer that allows for SQL Injection. This occurs due...

CVE-2022-50860

CVE-2022-50860 affects the Linux kernel AppArmor subsystem. After the commit a1bd627b46d1, the hname member of struct aa_policy becomes an invalid slab subset and cannot be freed with kfree_sensitive(); the issue is fixed by using aa_policy_destroy(). The vulnerability is a memleak in alloc_ns() ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not freeing resources using aapolicydestroy, which could lead to a memory leak...

EUVD-2025-204880

Malicious code in @aa-techops-ui/ping-authentication npm...

Malicious code in lobac-ubb-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ce6fd1c582a2dc4c18581b402f29347c8029e0b1c5981f1870b3c75aa6879c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134475

Malicious code in kisut-fafunig-aa npm...

EUVD-2025-134476

Malicious code in kisut-fafunig-aa npm...

Malicious code in poglymer-ogih-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a05b39bb4a2c4dbe9b4650f9f0c8c0fafe9e842f3b124928f61fff9b6b52e48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138949

Malicious code in poglymer-ogih-aa npm...

EUVD-2025-138694

Malicious code in polymer-aa-aahai npm...

Malicious code in sahnim-sati-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892476635ea943b5e6907bf6df9d4c0a507668bdb7e7fa659e4dc4cb7957fdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178392 Malicious code in sahnim-sati-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892476635ea943b5e6907bf6df9d4c0a507668bdb7e7fa659e4dc4cb7957fdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aa-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528bdabfe278db5172816c7d221509d3494b22056b8c85d171e4453e74377875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136897

Malicious code in sahnim-sati-aa npm...

Malicious code in messi-aa-fuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ec4397e62fe75f61f8c27c64a0ad451b93b8b525ee23e19a000755b7eb55fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143935

Malicious code in nabuf-otimmn-aa npm...

MAL-2025-160282 Malicious code in messi-aa-sffs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea49bb468710a43ee3c59ac041576feca7a9bd7b5c6029a0dfb33be1138d6b87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-aa-ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f75231ed32b957af26a1d5ddd99dbfdfdd0b821cb9321db6960faa8f26ec7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avi-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565fb5ee361f014188d494b87a118acd0eec659b153bd5e0b0326edd35494bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibiian-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8fabae9ca47f618c8d07d277b3b84fb48e6e5b54fdc0d4269543bbca9c6f9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...