Malicious code in item-atm-kujolnoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7f8851960b780baaa05804300d2f7920b4bfc17a9939c779e043532ba685386 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atm-kujaulahubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fedba93dcbf0f1a15f6b494170abae6b4a64911ae5ebf62a8a9ae7306fde8b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atm-kujoloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8455fd4274803044fae51d2b3b49fdc3f5c34fb4e1fec7c2b7fae9e768c5cf97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183166 Malicious code in item-atm-kujoloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8455fd4274803044fae51d2b3b49fdc3f5c34fb4e1fec7c2b7fae9e768c5cf97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183158 Malicious code in item-atm-kuji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20bebc6df97862103ab148dd5efc29e272345fc0e3680947265484704dfc1a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atm-kujai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce9ffed68154fa2ace43f7873b374f9aff0f6768b054f4c99882722f6896d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atm-kujolioaknoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b44b2303aa44caedc3c259a2c5770f72e6bdc634a2fd66982b1091474d72e665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atm-kujoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6858429c39d692f93b472ac0b18d10ce9becd4589a086c363eb1b0f5cd655c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atm-kuji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20bebc6df97862103ab148dd5efc29e272345fc0e3680947265484704dfc1a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183163 Malicious code in item-atm-kujolinoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33cbe604ba43caac2e5da0dcb19f172982139e92122065996f9ea58d15c392a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

USN-7835-6: Linux kernel (AWS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

USN-7835-6 linux-aws-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

CLSA-2025-1762455270 kernel: Fix of 6 CVEs

fix: virtio-net: Add validation for used length CVE-2021-47352 - xen/netfront: don't use gnttabqueryforeignaccess for mapped status CVE-2022-23037 - net/sched: schqfq: Fix race condition on qfqaggregate CVE-2025-38477 - net: fix information leakage in /proc/net/ptype CVE-2022-48757 - net: atm:...

kernel: Fix of 6 CVEs

fix: virtio-net: Add validation for used length CVE-2021-47352 - xen/netfront: don't use gnttabqueryforeignaccess for mapped status CVE-2022-23037 - net/sched: schqfq: Fix race condition on qfqaggregate CVE-2025-38477 - net: fix information leakage in /proc/net/ptype CVE-2022-48757 - net: atm:...

CLSA-2025-1762454401 kernel: Fix of 6 CVEs

fix: virtio-net: Add validation for used length CVE-2021-47352 - xen/netfront: don't use gnttabqueryforeignaccess for mapped status CVE-2022-23037 - net/sched: schqfq: Fix race condition on qfqaggregate CVE-2025-38477 - net: fix information leakage in /proc/net/ptype CVE-2022-48757 - net: atm:...

Android malware steals your card details and PIN to make instant ATM withdrawals

The Polish Computer Emergency Response Team CERT Polska analyzed a new Android-based malware that uses NFC technology to perform unauthorized ATM cash withdrawals and drain victims' bank accounts. Researchers found that the malware, called NGate, lets attackers withdraw cash from ATMs Automated...

USN-7835-5: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

USN-7835-5 linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: In atm: clip, a memory leak in the struct clipvcc structure was fixed. In ioctlATMARPMKIP, the struct clipvcc structure is allocated and set to vcc-userback. The code assumes that vccDestroySocket passes NULLskb to vcc-push when...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: atm: The atmdevmutex is released after removing procfs in atmdevderegister. syzbot reported a warning during atmdevregister. 0 Before creating a new device and procfs/sysfs for it, atmdevregister looks up a duplicate device throu...