EUVD-2025-124323

Malicious code in nodemon-thuban-child-process-element-ui npm...

Malicious code in socketio-geckodriver-child-process-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 992519d57d5eaddeba7d0d897fcfd3a9290cc2d2f620518393717a638329adce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123268

Malicious code in promise-umbra-achernar-child-process npm...

EUVD-2025-115282

Malicious code in cluster-geckodriver-child-process-sails npm...

Malicious code in geckodriver-betelgeuse-child-process-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31abebe698d8af8cbc8ebce961177393b1d102428f71683195d47280d39b7ea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-child-process-concurrently-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2ddeddc56db997eedb9376c2bac0b0f00122edec437a41fa5927cb0001e8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116705

Malicious code in antares-child-process-algol-nightwatch npm...

EUVD-2025-120936

Malicious code in update-child-process-xerxes-postcss npm...

EUVD-2025-113562

Malicious code in fomalhaut-pyxis-child-process-terser npm...

EUVD-2025-121470

Malicious code in taurus-antares-child-process-commitlint-config-angular npm...

EUVD-2025-115348

Malicious code in child-process-zenobia-mocha-despina npm...

Malicious code in child-process-lint-staged-less-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62ba95efd3f3ef97d0e9b721dde58dd83c79c4eac6b6f8b08e9fb792462089a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149883 Malicious code in zephyr-child-process-apollo-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cdf2cdaee2edc3bdaa3dafa44c797d167187a3a3f86acedc1d2c42d0b8ced5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0

In the Linux kernel, the following vulnerability has been resolved: pfifotailenqueue: Drop new packet when sch-limit == 0 Expected behaviour: In case we reach scheduler's limit, pfifotailenqueue will drop a packet in scheduler's queue and decrease scheduler's qlen by one. Then, pfifotailenqueue...

kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0

In the Linux kernel, the following vulnerability has been resolved: pfifotailenqueue: Drop new packet when sch-limit == 0 Expected behaviour: In case we reach scheduler's limit, pfifotailenqueue will drop a packet in scheduler's queue and decrease scheduler's qlen by one. Then, pfifotailenqueue...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990628)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990628 advisory. In the Linux kernel, the following vulnerability has been resolved: block: don't delete queue kobject before its children kobjects aren't supposed to be deleted befo...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988742)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988742 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks ofgetchildbyname returns a node pointe...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989070)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989070 advisory. In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix reset-controller leak on probe errors Make sure to release the lane reset...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989434)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989434 advisory. In the Linux kernel, the following vulnerability has been resolved: block: don't delete queue kobject before its children kobjects aren't supposed to be deleted befo...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989402)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989402 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Cali...