EUVD-2025-180140

Malicious code in balance-char-byte-final-big npm...

EUVD-2025-179924

Malicious code in byte-orchestrate-wind-water-private npm...

EUVD-2025-176083

Malicious code in table-link-chi-grid-byte npm...

MAL-2025-187723 Malicious code in lambda-byte-sigma-static-reject (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e512f773e77c8591c7fdc12e28652a7c98180e468e2eaac0b828ba21c83918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176060

Malicious code in tau-float-string-reject-byte npm...

EUVD-2025-178039

Malicious code in log-byte-cluster-uglify-error npm...

EUVD-2025-177157

Malicious code in pipe-final-tree-emulate-byte npm...

EUVD-2025-177160

Malicious code in pipe-byte-spy-fork-notify npm...

EUVD-2025-178448

Malicious code in import-debug-compress-byte-long npm...

EUVD-2025-179926

Malicious code in byte-log-float-cold-analyze npm...

EUVD-2025-178052

Malicious code in load-integer-wind-byte-key npm...

EUVD-2025-176951

Malicious code in proxy-decrypt-bad-byte-cat npm...

EUVD-2025-178159

Malicious code in lambda-byte-sigma-static-reject npm...

EUVD-2025-179347

Malicious code in delta-sun-psi-new-byte npm...

MAL-2025-190172 Malicious code in visualize-interface-byte-char-chi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ead251d6eb4fa428186b8d534c77ad55bc56fed4b1bbae3390864c425b362a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190238 Malicious code in water-await-kappa-byte-minify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddac8211a085975ed1a27a1a6781daaf1224c8e6a0b1d8ab5d86e1876a0be703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Siemens SIMATIC S7-1500 Out-of-bounds Read (CVE-2022-48303)

GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in fromheader in list.c via a V7 archive in which mtime has approximately 11 whitespace...

kernel: team: better TEAM_OPTION_TYPE_STRING validation

In the Linux kernel, the following vulnerability has been resolved: team: better TEAMOPTIONTYPESTRING validation syzbot reported following splat 1 Make sure user-provided data contains one nul byte. 1 BUG: KMSAN: uninit-value in stringnocheck lib/vsprintf.c:633 inline BUG: KMSAN: uninit-value in...

kernel: firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Fix OOB memory read access in KUnit test ctl cache KASAN reported out of bounds access - csdspctlcacheinitmultipleoffsets. The code uses mockcoefftemplate.lengthbytes 4 bytes for register value allocations. But...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990413)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990413 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmem: Fix shift-out-of-bound UBSAN with byte size cells If a cell has 'nbits' equal to a multip...