MAL-2025-167313 Malicious code in teagood-nakamala48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35174998f6a1c8f0f33e692e51ab33b5a831413c9122b474f85dea7747c2ef09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151460 Malicious code in abiuba-avimun-abatiapu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47504e40fcc635d307f5fbeddf645cb535bb532bd8e9cd3940b9220efbe5d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-trura-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b0339a3050ea93ac5a5d80eae0227bca550296350978617e48806821139b56d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-10905

Collision in MiniFilter driver in Avast Software Avast Free Antivirus before 25.9 on Windows allows a local attacker with administrative privileges to disable real-time protection and self-defense mechanisms...

CVE-2025-40164

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smpprocessorid in preemptible code warnings Syzbot reported the following warning: BUG: using smpprocessorid in preemptible 00000000 code: dhcpcd/2879 caller is usbnetskbreturn+0x74/0x490...

CVE-2025-40164 usbnet: Fix using smp_processor_id() in preemptible code warnings

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smpprocessorid in preemptible code warnings Syzbot reported the following warning: BUG: using smpprocessorid in preemptible 00000000 code: dhcpcd/2879 caller is usbnetskbreturn+0x74/0x490...

CVE-2025-40164 usbnet: Fix using smp_processor_id() in preemptible code warnings

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smpprocessorid in preemptible code warnings Syzbot reported the following warning: BUG: using smpprocessorid in preemptible 00000000 code: dhcpcd/2879 caller is usbnetskbreturn+0x74/0x490...

CVE-2025-40164

Technical details for CVE-2025-40164 are not publicly provided in the connected documents. Monitor for updates; current sources only list the CVE without vendor/affected products, impact, or remediation specifics.

CVE-2025-40164 usbnet: Fix using smp_processor_id() in preemptible code warnings

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smpprocessorid in preemptible code warnings Syzbot reported the following warning: BUG: using smpprocessorid in preemptible 00000000 code: dhcpcd/2879 caller is usbnetskbreturn+0x74/0x490...

CVE-2025-40142 ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Disable bottom softirqs as part of spinlockirq on PREEMPTRT sndpcmgrouplockirq acquires a spinlockt and disables interrupts via spinlockirq. This also implicitly disables the handling of softirqs such as TIMERSOFTIRQ. ...

CVE-2025-40142 ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Disable bottom softirqs as part of spinlockirq on PREEMPTRT sndpcmgrouplockirq acquires a spinlockt and disables interrupts via spinlockirq. This also implicitly disables the handling of softirqs such as TIMERSOFTIRQ. ...

EulerOS 2.0 SP10 : cloud-init (EulerOS-SA-2025-2408)

According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this,cloud-init defau...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper removal of the iris module when a firmware download fails, which could result in a runtime PM count...

Malicious code in tomi-dodol41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f634d69b1e368034062e330d1ef542084bb287e3e2268e447fa9283060c82855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132633 Malicious code in cooing_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f31f37aa5b1c816cb6a3af72a41b7551a7792d0708b9ecb2328539d046b87bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133188 Malicious code in erwin-empal38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87122c384993bddf65f74123bcda113a0b14cd27a65f5f47693554cd2ab4427a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-mangga19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51e24829ab2152039311d864a870d92a85dfcf921c69b4377b86f5175232e23f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128895 Malicious code in net_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7a3166da8e657edf572f7303a231255aca292a8387327219c7ac5dd9c275d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-10905 Collision in minifilter driver of Avast Free Antivirus results in disabling of real-time protection

Collision in MiniFilter driver in Avast Software Avast Free Antivirus before 25.9 on Windows allows a local attacker with administrative privileges to disable real-time protection and self-defense mechanisms...

MAL-2025-118441 Malicious code in zaki-lumpur83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d43647a8bf3db74d5af606baded011124ec91df7a8da2dbe8ae0540cd2cd6b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...