MAL-2025-113408 Malicious code in dian-sate19-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172d489c77e034a8965dab3cf42563f972e0dbf138dd17ea09f42dee5042f48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116681 Malicious code in relaxed_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3498a37c561cec967356a831d3c2e5493754b7f2e473ab3e76b11c0b95af754e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Set nchannels after allocating struct cfg80211scanrequest Make sure that nchannels is set after allocating the struct cfg80211registereddevice::intscanreq member. Seen with syzkaller: UBSAN:...

kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix UB due to uninitialized stack access in ipvsprotocolinit Under certain kernel configurations when building with Clang/LLVM, the compiler does not generate a return or jump as the terminator instruction for...

Malicious code in welcome_piranha_crimson-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90c41a455bd7292276c3111f54d03b0845bf5b474528de992e464eafd732277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111856 Malicious code in enchanting_xerinae_cyan-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ab4bac3dac8abbba0c8f60b581f3fb51b6d921870cc648695dcb8119bef1ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111802 Malicious code in desirable_swan_bronze-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d46c2637209ffa07cc219730eb0819300e60921b0c1466d546365fda955d39a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112162 Malicious code in outside_butterfly_peach-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aff2c204ebd711a672ac0641830358f79d1d336b1011a53aa4eb35bc88bbedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse_guanaco-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942f5d391e7c82a643d90ac1d26ef7490a02583a859785f44e6de7ed8db15060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in contemporary_lark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847bf5f54bd22f5cdb107591c7c81cd65a4577b0f01dc3600a2c1b3ade4a4d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy_baboon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcdfe52e88030454d65787adb3359e0ccb7640aaf7ba5098802ee69c2860c542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orildyn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6990b6902fbfdcea9fa065f255fe5d265f25042d61bc17cc0079641527746f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102320 Malicious code in exceptional_mole-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09213710ae52bf64a66329fe9b2dbb08ae980fcb06b61a89d183b937e4a3389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107432 Malicious code in pure_louse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14368e86d85683f40604acbbb389b04cfba45f9e09f043f8f683c6d77b5a67da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99706 Malicious code in aware_vole-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254d4f623443ab77c11fe37e7d0a4317bede07b642095195e8956611e9027606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_rook_fuchsia-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de5874812c0a753d2fd80910568924cb689aea8e0b5471cee36f96dcf96fe33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7a87c1875c044932072789f1764fdb20ee71a1b8d676ed29fede5ac3b63327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101317 Malicious code in delighted_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0014e7a822c9e2b3257ff5abd2d1a1b4c9fa7c6b131beb066393db8914e7ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100661 Malicious code in collective_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a394945afc95b127c504b1e717282dd8444a1ff9219dfc2a0e986f38a000dbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100669 Malicious code in colonial_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8a546c81ab593a9352b9e41d97b7bda9df04971b721905ba9167b8294c4e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...