SUSE-SU-2025:4056-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP7)

This update for the Linux Kernel 6.4.0-15070051 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. - CVE-2025-38511: drm/xe/pf: Clear all LMTT pages on alloc bsc1248176. - CVE-2025-38617: net/packe...

EUVD-2025-92983

Malicious code in bindingsilverfishz3n npm...

EUVD-2025-92986

Malicious code in bindingantlionz3n npm...

Malicious code in binding_magpie-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150239c9a4ba0ef1b63d86046f1951c8e5193cdb95d705ba00db8679ac0e2c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74932

Malicious code in bindingcow-strongdev npm...

EUVD-2025-74930

Malicious code in bindingmagpie-appteadev npm...

EUVD-2025-79714

Malicious code in bindinggrousedumbs npm...

Malicious code in binding_grouse_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ecae26afe0500615dfd8e09c217568300418c819ddf481df5e7cb44e5348114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82641

Malicious code in bindingcougarz3n npm...

EUVD-2025-65172

Malicious code in bindingguineafowlz3n npm...

MAL-2025-93382 Malicious code in binding_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b80d5bc565049cc8eaa1c1d2ac0961d2821d4ed8f7e216b1998849ced8c7241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65171

Malicious code in bindinghawkz3n npm...

EUVD-2025-65170

Malicious code in bindinghippopotamusz3n npm...

Malicious code in binding_deer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f86dd05e7b48fdfeb556fcfc35a70a46c740368a38779bb11b7126db65392a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55682

Malicious code in binding-turquoise-mongoose npm...

Malicious code in binding-turquoise-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a387261f49fba2401e82093218799ed8e9548994eaf5e4d6219d0c7683650275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding-peach-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb585e000428d154a8ccac25963434455373163dde7ee81b5257c913bd4c045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding-green-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8320738baead6af2bf10b6bfd6c36b7532e84f595b033ea209136bcdae8b1d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55684

Malicious code in binding-green-cricket npm...

EUVD-2025-55683

Malicious code in binding-peach-guineafowl npm...