Malicious code in atomic_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732482d04febc269c667f7eb28188dd2a4bae0b4e43c2217676b067cfe753458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93147

Malicious code in atomicbugz3n npm...

MAL-2025-112737 Malicious code in atomic_bug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b55f1e2d2d2fd63004aa8df0272e23b81563242a82484b67283a4bea6639ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atomic_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4691a4dfae74afa30e48357a1229a39131fb32b6d992076deb1657a7f8f42dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77725

Malicious code in atomicearwigz3n npm...

Malicious code in atomic_lion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3458abb55b27ba57530c5d2e15156d593ee6d4257ac547fb468a418336a346e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atomic_mongoose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797e62a483b2fda7bff2860d9bcfcab56c1db9569f61f7cd01c45fcddc366072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82805

Malicious code in atomiccephalopodz3n npm...

EUVD-2025-65256

Malicious code in atomiclousez3n npm...

EUVD-2025-55781

Malicious code in atomic-emerald-snail npm...

EUVD-2025-55782

Malicious code in atomic-coral-marmot npm...

EUVD-2025-55780

Malicious code in atomic-scarlet-bug npm...

EUVD-2025-50678

Malicious code in atomicwildfowlz3n npm...

EUVD-2025-48706

Malicious code in atomicgullz3n npm...

Fake CAPTCHA sites now have tutorial videos to help victims install malware

Early on in 2025, I described how criminals used fake CAPTCHA sites and a clipboard hijacker to provide instructions for website visitors that would effectively infect their own machines with an information stealer known as the Lumma Stealer. ClickFix is the name researchers have since given to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989643)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989643 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsethash: unaligned atomic read on struct nftsetext Access to genmask field in struc...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990319 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Fix use of mutex in IRQs disabled section Current imc-pmu code triggers a WARNIN...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989486)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989486 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Fix use of mutex in IRQs disabled section Current imc-pmu code triggers a WARNIN...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989969)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989969 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: core: Run atomic i2c xfer when !preemptible Since bae1d3a05a8b, i2c transfers are non-atomic...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989760 advisory. In the Linux kernel, the following vulnerability has been resolved: netpoll: Fix race condition in netpollowneractive KCSAN detected a race condition in netpoll: BUG...