EUVD-2025-180082

Malicious code in big-data-char-xi-kernel npm...

Malicious code in debug-char-code-double-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf04c663a92261e5204471a60b4f4195cd06203bbc747e721e88d638e35efbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175995

Malicious code in test-book-final-epsilon-char npm...

EUVD-2025-175960

Malicious code in theta-daemon-moon-char-info npm...

EUVD-2025-179758

Malicious code in char-xml-xml-validate-validate npm...

Malicious code in hash-char-new-alert-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157e9621c61fae908d1e7be8b87a7307a60fae9033b01116533f0b50fe64262d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179760

Malicious code in char-double-load-notify-gamma npm...

EUVD-2025-179387

Malicious code in debug-char-code-double-encode npm...

EUVD-2025-179762

Malicious code in char-bundle-route-refactor-async npm...

EUVD-2025-178094

Malicious code in link-cat-fork-char-easy npm...

EUVD-2025-180310

Malicious code in assert-zeta-visualize-data-char npm...

Malicious code in visualize-interface-byte-char-chi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ead251d6eb4fa428186b8d534c77ad55bc56fed4b1bbae3390864c425b362a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175961

Malicious code in theta-air-char-import-phi npm...

MAL-2025-189233 Malicious code in rho-object-test-char-shell (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9efa550c99c9e9618cc08596bdd81ee7ec3ef19c63291d58ac245ccc618c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186895 Malicious code in execute-char-char-stub-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fe5d9354bb43f2724bc7efeec94e26f50bce0f7ac425402af053df136cd5c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990554)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990554 advisory. In the Linux kernel, the following vulnerability has been resolved: platform/x86: wmi: Fix opening of char device Since commit fa1f68db6ca7 drivers: misc: pass...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990118)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990118 advisory. In the Linux kernel, the following vulnerability has been resolved: platform/x86: wmi: Fix opening of char device Since commit fa1f68db6ca7 drivers: misc: pass...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989369)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989369 advisory. In the Linux kernel, the following vulnerability has been resolved: platform/x86: wmi: Fix opening of char device Since commit fa1f68db6ca7 drivers: misc: pass...

CuPs (>=0.0.0 <=0.0.5), Druid_task1 (=0.1.0) +318 more potentially affected by unknown CVE via unic-char-property (>=0.6.0 <=0.9.0)

unic-char-property CARGO version =0.6.0, =0.0.0, =1.11.3, =0.1.2, =0.1.0, =0.3.0, =0.1.0, =0.5.0, =0.5.0, =0.1.0-alpha.4, =2.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0081...

add_space (>=0.1.2 <=0.1.8), ale_python_parser (>=0.1.0 <=0.1.2) +71 more potentially affected by unknown CVE via unic-emoji-char (>=0.7.0 <=0.9.0)

unic-emoji-char CARGO version =0.7.0, =0.1.2, =0.1.0, =4.0.0, =4.4.7, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0090...