EUVD-2025-179250

Malicious code in double-file-encode-moon-virtualize npm...

EUVD-2025-179247

Malicious code in double-rain-protected-import-monitor npm...

EUVD-2025-179702

Malicious code in cluster-decompress-double-encode-quick npm...

EUVD-2025-179160

Malicious code in emulate-link-shell-async-double npm...

EUVD-2025-176643

Malicious code in rho-mu-catch-double-cloud npm...

EUVD-2025-177469

Malicious code in omega-string-view-double-warn npm...

EUVD-2025-179139

Malicious code in encrypt-cloud-boolean-double-mock npm...

EUVD-2025-179246

Malicious code in double-uglify-long-static-cron npm...

EUVD-2025-180005

Malicious code in boolean-double-benchmark-star-node npm...

EUVD-2025-177783

Malicious code in module-data-secure-psi-double npm...

EUVD-2025-177536

Malicious code in notify-link-proxy-double-proxy npm...

EUVD-2025-175897

Malicious code in transpile-double-grep-book-iota npm...

EUVD-2025-178091

Malicious code in link-emulate-double-table-book npm...

EUVD-2025-177465

Malicious code in omicron-enum-link-permission-double npm...

MAL-2025-188413 Malicious code in omega-string-view-double-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da844f5894c542a0d1cf7cd454e4368a4f85e5c9fcf2b60c0a06e16e1a40fa0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186630 Malicious code in double-benchmark-pipe-hash-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3693bc7ca615b1cd5a5525161fc2c67df2038089b984d721e39eaf4b39dc51b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-150388

In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqskfastopenremove in tcpconnrequest. syzbot reported the splat below in tcpconnrequest. 0 If a listener is closed while a TFO socket is being processed in tcpconnrequest, inetcskreqskqueueadd does not set reqsk-...

SUSE CVE-2025-40145

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Fix double cleanup on devmaddactionorreset failure When devmaddactionorreset fails, it calls the passed cleanup function. Hence the caller must not repeat that cleanup. Replace the "goto errregulatorfree" by the actu...

SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2025:4057-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4057-1 advisory. The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issu...

Siemens SIMATIC S7-1500 Double Free (CVE-2024-39292)

In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winchhandlers list. If that happens, registerwinchirq adds to that list a winch...