Malicious code in inal-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4089352e58aae7f0cdd2a9118066f499d797744ad90a1f0e5206f79003b2e380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-udk-vakumakuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b94744532e1e00c32ebeaa5abd417f6be85efafadf952b8c821b17443db90153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150531 Malicious code in @miptaa02/assyas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451a74d31abccfa415482d6afab11fc66f3977cd88e284e05d4b025111365d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139285 Malicious code in aldebaran-query-slidev-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5cfed5132e8d320f4fb2fb99af73bb8777c499543b18594cfcbf201b4625eda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134279 Malicious code in indah-bika8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b4aeed8dfde167f485cd1eb4a7e7d62146497a9108e7639450fa80e616a990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137199 Malicious code in tania-kembang83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a6a6bcbfeb7f203105115700397233f503b5ad3e80f89f25431d4455678b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127146 Malicious code in happy_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9622671f72e65b71a27f52ba3d3336574d3b6a21050a0ce8649a3337c4e7e6b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100914 Malicious code in content_cephalopod-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e60abf3d710f07fecfa4062beb31443935dc956fd2aab8412126defde8795a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99402 Malicious code in amused_armadillo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b94fc64ca358712a1833f10a360a838b1e2324dc8465964609c81411d802f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-lontong36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c4a5332000d0ffb1b8f7b834ab46279bbb1dadbb4a5bdd7d99dfde1d592a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81839 Malicious code in udin-moci29-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b023fc507909e31307527d1d272f07ac6f48a660667c75419db1c8f60d898c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tapai85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c035e62e939066201bc5f133c2fad58943171b06c31b4fca40cebfd9ca7bef18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68202 Malicious code in extreme-sapphire-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d05cb2e6c1949cf65fc509b0111cc0ef466de840938798d07c4ba83bf633183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990045)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990045 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix the null pointer dereference in applystateadjustrules Check the pointer value ...

UBUNTU-CVE-2023-53730

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: use spinlockirqsave in adjustinuseandcalccost adjustinuseandcalccost use spinlockirq and IRQ will be enabled when unlock. DEADLOCK might happen if we have held other locks and disabled IRQ before invoking it. Fix it b...

CVE-2023-53730

CVE-2023-53730 : In the Linux kernel, the blk-iocost code path uses spin_lock_irq() when acquiring bfqd-related locks in adjust_inuse_and_calc_cost(), which can leave IRQ state inconsistent and lead to a potential deadlock if other locks are held and IRQ is disabled before unlocking. The fix swit...

CVE-2025-62648: Incorrect Authorization

The Restaurant Brands International RBI assistant platform through 2025-09-06 allows remote attackers to adjust Drive Thru speaker audio volume...

EUVD-2020-16067

Malware in sbrugna...

The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm, which allows a hacker to trigger a service failure.

The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm is related to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm, which allows a hacker to trigger a service failure.

The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm is related to the manipulation of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...