Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005729)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005729 advisory. In the Linux kernel, the following vulnerability has been resolved: cassini: Fix a memory leak in the error handling path of casinitone cassaturnfirmwareinit allocat...

EUVD-2025-179668

Malicious code in comet-cassini-stratigraphy-mensa npm...

EUVD-2025-177134

Malicious code in playwright-asthenosphere-norma-cassini npm...

EUVD-2025-178078

Malicious code in lint-cassini-metalsmith-jupiter npm...

EUVD-2025-177724

Malicious code in mysql-cassini-unuk-middleware npm...

EUVD-2025-179869

Malicious code in cassini-html-webpack-plugin-loglevel-jest npm...

EUVD-2025-179866

Malicious code in cassini-socketio-concurrently-forever npm...

EUVD-2025-176162

Malicious code in subduction-repository-cassini-centauri npm...

EUVD-2025-179571

Malicious code in coronalmassejection-asthenosphere-astrobiology-cassini npm...

EUVD-2025-178705

Malicious code in global-cassini-hexo-flare npm...

EUVD-2025-177738

Malicious code in mui-xerxes-proxima-cassini npm...

Malicious code in cassini-socketio-concurrently-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e912fdb2bf197c65c430a9c9fbd0f8051136d3e5aec231088a303a0882b680f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in areology-eleventy-cassini-filament (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba97426e3f33f6de299e1fcfff8dfee76502d5f73058164cf60ca33917a24a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177548

Malicious code in nodemon-kinetic-native-cassini npm...

Malicious code in nodemon-kinetic-native-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0a0e399774059c86b18263f553a0c4e86eb2e437c88f3ce39f78d204bfe905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176411

Malicious code in server-nestjs-selenium-cassini npm...

EUVD-2025-176793

Malicious code in rate-limiter-chalk-miranda-cassini npm...

EUVD-2025-179872

Malicious code in cassini-frontend-umbriel-ophiuchus npm...

EUVD-2025-179870

Malicious code in cassini-hawkingradiation-rocket-sedna npm...

Malicious code in spectroscopy-dotenv-cassini-sedimentology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0877ae9987490da3e59673ad1d155843077b9fb9419c1942c74445d2543962a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...