MAL-2025-169966 Malicious code in uinsu-lot-bisabmyuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a4b5028ff6ecea92d97e4644e6ccda493a97ac1e4b782b6cbd4ad4c403b21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160066 Malicious code in manurung-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc91551e06cd18229b49265ca5b529c19463ec28b8164de37ef5b660b7147b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162209 Malicious code in nokire-abimanyu90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25ad5e98d940e6ff708f24d058ec290d19616f5897bb7990fa999d7eefc2c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a47d6f94eced05c40f45a65e99d584e3d93db92e91f232283c04c55ec3d3fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in infi-gfobai-jigugaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f3b4eea85a51a1a6ff6fda4f9fff32b712be36bc134d5e20bd85902584b6c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144064 Malicious code in jupiter-sqlite-centaurus-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16783791eda5125cdf43a24b575cda8da3c800a4bbac7fb2e98a57d8475c7841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148474 Malicious code in taurus-module-style-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6f458ad29f3855a38854e4aee7cb2e60dbad295cb3fa1b3daef65ccb8840a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143885 Malicious code in javascript-pegasus-chariklo-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6997bd3466d1dbc0d2d8e506913bb83f681fd0e26386f1abe92ec640aecc0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146131 Malicious code in phenomic-element-ui-publish-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba58e853d0af0e2664e70c345523ddd91c142e1fa69ff52e7e8d1545fc87d569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

UBUNTU-CVE-2025-40111

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

CVE-2025-40111

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

CVE-2025-40111 drm/vmwgfx: Fix Use-after-free in validation

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

Malicious code in practical_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54173fe55bfcc82cce5dd3bd308fba5406893968ec861f72f1eaa4a4c2c1eede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obedient_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612baff6073a6ba7f2ba85413600d853ba6e562a9022122506c1977ee4b4027b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mute_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943c015ad5166e5009a70f298cd9cb9f8cd4ca5147dc56b435cbb218fcf57a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-buburayam37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dbf334e4744efa7892df5a3730c4895111e5c7dccb799c27f11104ec11aaf6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-toge94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98b523146717f64496a30873f983703dc2564ac952767d4bc1e6548ba40b462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-nasipecel85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc5e7fe8e917adfffafee8fcebfccb1dd907ee8b0d1949791ac61b10a47c529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113630 Malicious code in electronic_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f01528323b148d041d59af839c463952334776deddb2bfd60b6b45441faeab97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117155 Malicious code in small_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f63d8a4cdc72ccf7f67d9eec0d680c2af296482a9aa068beb672e65934772e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...