SUSE-SU-2025:4057-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38008: mm/pagealloc: fix race condition in unaccepted memory handling bsc1244939. - CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister...

EUVD-2025-77257

Malicious code in constantlobster-silentdev npm...

EUVD-2025-77659

Malicious code in constantpeacockemerald-14 npm...

Malicious code in constant_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57297409f023fe6ebbddfdb7b4c0ce8ad1f8973d734cb0686ee98331a9f01c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100891 Malicious code in constant_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57297409f023fe6ebbddfdb7b4c0ce8ad1f8973d734cb0686ee98331a9f01c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99617 Malicious code in artificial_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 880b049719533361ecd063e7f9732f1262c2c182bcf049d8ffbeda77e48ed7ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98706 Malicious code in excess_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75573e9ade14997fe01e4e88118c7cd8b106418dddcac4932c6f7e94f7a98c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98265 Malicious code in putri-keripik23-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9164e3bf4beb5e42ff5688b65b7941fdacc4ac7db6342d355d366929d76893f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93125 Malicious code in additional_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f93a4b9aa4412a2d54b965aa779ac9ad74193bc6b4ac95dde1a9cea1485ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64806

Malicious code in constantbedbugz3n npm...

EUVD-2025-64805

Malicious code in constantloonz3n npm...

MAL-2025-83508 Malicious code in bayu-kentang43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c42dd5591247fc8938d81ccee30600f14196b3b0d15f8134821c42c8f80320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-lengko53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b67bacd2e318c0385ee05c52ee64b857a2854032c0aaa0a0d767c6068c85a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-86681

Malicious code in constantslugz3n npm...

MAL-2025-84252 Malicious code in constant_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30849c9686032c082422da05e3dcf6043bfb08afd13a798e7702623c51b97274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84254 Malicious code in constant_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebefa7209a624e510ff5d8b88a154587827ef6f93e678e9eba3a4f68a0a8dcbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-bubursumsum31-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96f527db22dc1dc98eca0d7bb5b9e33dfddf714596df9185765a713a744853e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55215

Malicious code in constant-chocolate-firefly npm...

Malicious code in constant-lime-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80612f031df483c564f9aa4bc20938e434e0f663fab74bfa57d9f28719e8fcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69718 Malicious code in open-fuchsia-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51343d1b3e01fcb8685ee47251e022c07389e7e80919d87f17d7e939698cd594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...