MAL-2025-66882 Malicious code in automatic-scarlet-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e846f52ea0f66ec5d6ba06e6207b2100f0f07b7ac28281ba3d6f1468a6842f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63740 Malicious code in joko-tomat90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 065aca833effdb75cc19fb774f5b98abb70d448c0f0c5f11b7ed0946d24819f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63728 Malicious code in joko-sego10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5194c37b53815705a62ed14ee8e9f00a6e4c230cd87193303c4e77e1f63ba5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62776 Malicious code in erick-mieayam43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c8dc484b1f12b0a8bdb2ac4b10e224527163b20497715bac6ea224f5ee691b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cultural_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9353d2bc597b1eaf0c425ddb65962e87210f377670c67156137eebef374d27d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60588 Malicious code in happy_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b6f72add9aef4afb01b7fa8ec8edb1c19efb8d35bbedc7409b9cc682274f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61218 Malicious code in rival_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8daaeb7f8918f628cb182f63c9a036c463849b248ab6b34d6d28e1e69824881b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible_deer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ccb64dda21b9d417171d03a0a5ef0ca5ec8ff791dfe74d6124d7a28689fe9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-peyek2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a43f0f3bbaab160e2c265fbce60d9aa255678557eca4bc4ae8a1c231e8b7218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55149 Malicious code in agus-sego52-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b0da208a282edc8402db4a596c358023193593825f2b89ae0055d084cacbb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-rangi68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffad862f086b7c12b891a08e9dc6a24beee3e6ddf0fcbd73dbb87fd70adbf0c8 The package arif-rangi68-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

CVE-2025-40092

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: Refactor bind path to use free After an bind/unbind cycle, the ncm-notifyreq is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer...

UBUNTU-CVE-2025-40094

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: facm: Refactor bind path to use free After an bind/unbind cycle, the acm-notifyreq is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer...

[SECURITY] Fedora 43 Update: complyctl-0.1.0-1.fc43

complyctl leverages OSCAL to perform compliance assessment activities, using plugins for each stage of the life-cycle...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from unconditionally disabling sdma ecc irq during a hang cycle, which could lead to null pointer dereferencing...

Inside the F5 Breach: What We Know and Recommended Actions

On October 15, 2025, F5 Networks disclosed a breach attributed to a sophisticated nation-state actor. In an SEC 8-K form also filed that same day, F5 confirmed unauthorized access to its internal development and knowledge-management systems dating back to August 9, 2025. Some source-code and...

CVE-2025-9177

A denial-of-service security issue exists in the affected product and version. The security issue stems from a high number of requests sent to the web server. This could result in a web server crash however; this does not impact I/O control or communication . A power cycle is required to recover...

CVE-2025-39966 iommufd: Fix race during abort for file descriptors

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix race during abort for file descriptors fput doesn't actually call fileoperations release synchronously, it puts the file on a work queue and it will be released eventually. This is normally fine, except for iommufd t...

EUVD-2025-34192

A denial-of-service security issue exists in the affected product and version. The security issue stems from a high number of requests sent to the web server. This could result in a web server crash however; this does not impact I/O control or communication . A power cycle is required to recover...

CVE-2025-9177

A denial-of-service security issue exists in the affected product and version. The security issue stems from a high number of requests sent to the web server. This could result in a web server crash however; this does not impact I/O control or communication . A power cycle is required to recover...