MAL-2025-121211 Malicious code in kiki-lapis63-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32f5f81dddf5d1cdb4df0167f6fc1a4417031e094842735388110616cf3a45ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uniform_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 472f1ba7565be762ec2e123b14c0382fa904d2b3f1626b22e116f5329551a4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-donat40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01680139176fb0ab9ca3c683eb647564bec206d3429397017465918ec9a0fadf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116967 Malicious code in sari-peyek18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe6c0aac98caa6eca210e6a3850f71f9a2c46e8e4fa00a7f99a20025e5fcdbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-ikan69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369ce28acc9b912bc48e43e64cdffdc7ca2546d625c367aa0913a7f13a96ab98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c459b28a53030a382503b2b5452fc7a2b78ea0872167d6657f44018e4d47ed6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61f417360fc5e940cabfce27f58f16cb564a2cb263cb78c5f21a342cbdd62d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shivering_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a5c5ff026cc79f19f1f065803d0d4fbccc60ff7464a233f06f78fa9eaa04ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-otak-otak62-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eddfb8203e361368686faafc4c103cc960c49506640db82da17d29e666b3fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116681 Malicious code in relaxed_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3498a37c561cec967356a831d3c2e5493754b7f2e473ab3e76b11c0b95af754e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113408 Malicious code in dian-sate19-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172d489c77e034a8965dab3cf42563f972e0dbf138dd17ea09f42dee5042f48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balanced_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e24711d3d59eeac4af2ca568a0fb37438fe58d2144d08891db6a996185274bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-lepet100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1420acfe00f1cbab45c0dd1454ab698716d449bdfbc4dd4be1ffbde0ea19994a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-brengkes40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 307d3565a7b18898abec5531ce2a8a159dbbc38ca2c9e46170d05d97099c59c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113100 Malicious code in cindy-telur3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ebfe81318fd591a96bf66a85f32dd0fd3b28fe18bf806ed24c7874a3ed937e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Set nchannels after allocating struct cfg80211scanrequest Make sure that nchannels is set after allocating the struct cfg80211registereddevice::intscanreq member. Seen with syzkaller: UBSAN:...

kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix UB due to uninitialized stack access in ipvsprotocolinit Under certain kernel configurations when building with Clang/LLVM, the compiler does not generate a return or jump as the terminator instruction for...

Malicious code in welcome_piranha_crimson-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90c41a455bd7292276c3111f54d03b0845bf5b474528de992e464eafd732277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112162 Malicious code in outside_butterfly_peach-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aff2c204ebd711a672ac0641830358f79d1d336b1011a53aa4eb35bc88bbedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111802 Malicious code in desirable_swan_bronze-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d46c2637209ffa07cc219730eb0819300e60921b0c1466d546365fda955d39a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...