SUSE-SU-2025:4111-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1249859. - CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam bsc1249857. ...

Cosmos: Economic DoS (Griefing) on IBC Relayers via `memo` Callback Gas Exploitation

Summary of Impact This vulnerability allows an attacker to bypass the relayer's simulation defense and force permissionless relayers to execute computationally expensive, but 'successful', transactions via the memo callback feature. This creates an asymmetric economic attack where the relayer's...

SUSE CVE-2025-40132

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Prevent jump to NULL addsidecar callback In createsdwdailink check that sofend-codecinfo-addsidecar is not NULL before calling it. The original code assumed that if includesidecar is true, the codec on that...

EUVD-2025-175837

Malicious code in umbra-iota-graphql-callback npm...

EUVD-2025-179492

Malicious code in crust-thuban-archaeogenetics-callback npm...

EUVD-2025-179903

Malicious code in callback-saturnology-taphonomy-radiant npm...

Malicious code in soap-callback-convict-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4922425b583d08a372e377d0b2ee372ad8912aa2da5902301f4c5ec520af10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179905

Malicious code in callback-kastra-wolf-abiogenesis npm...

EUVD-2025-176116

Malicious code in supernova-apex-brane-callback npm...

EUVD-2025-179939

Malicious code in bunyan-callback-pipe-mysql npm...

Malicious code in stop-callback-wezen-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fa92762b57b343fad2ecbf79edc792490f94879bf693116bb44049f18da222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-callback-abiogenesis-mesosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42bd97b8e1ec351f3c30094833234126ca837fa785a420b0c9ef4ae12a84d81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-zephyr-semantic-ui-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3ae303ee981c1075c7fce2279b092cf996dc5af84dcd3a3fbe2c0c2f2810e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180279

Malicious code in astrophysics-prosthetics-callback-deneb npm...

EUVD-2025-177384

Malicious code in paleobotany-callback-magnetosphere-bellatrix npm...

EUVD-2025-179290

Malicious code in docusaurus-callback-abiogenesis-mesosphere npm...

EUVD-2025-179594

Malicious code in configstore-quark-sync-callback npm...

EUVD-2025-178721

Malicious code in geodynamo-callback-less-eclipse npm...

EUVD-2025-176847

Malicious code in quasar-backend-altair-callback npm...

MAL-2025-190219 Malicious code in warp-boson-callback-supercluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95312546c36f2f246c3a72e1074b30f6d60280d986fd0cd2fc73fee683e7972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...