Malicious code in hariyono-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b59790865902cd72aabb1943031af7549a135b9bdf8c625fe570a6b972b3a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152147 Malicious code in akabia-aligma-aibava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dbe7b0daf3e88c9b807d90a83aaba91c146dfab8880d451bb5db3de76881f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143885 Malicious code in javascript-pegasus-chariklo-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6997bd3466d1dbc0d2d8e506913bb83f681fd0e26386f1abe92ec640aecc0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148474 Malicious code in taurus-module-style-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6f458ad29f3855a38854e4aee7cb2e60dbad295cb3fa1b3daef65ccb8840a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144064 Malicious code in jupiter-sqlite-centaurus-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16783791eda5125cdf43a24b575cda8da3c800a4bbac7fb2e98a57d8475c7841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146131 Malicious code in phenomic-element-ui-publish-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba58e853d0af0e2664e70c345523ddd91c142e1fa69ff52e7e8d1545fc87d569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

UBUNTU-CVE-2025-40111

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

CVE-2025-40111 drm/vmwgfx: Fix Use-after-free in validation

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

CVE-2025-40111

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

Malicious code in obedient_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612baff6073a6ba7f2ba85413600d853ba6e562a9022122506c1977ee4b4027b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in practical_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54173fe55bfcc82cce5dd3bd308fba5406893968ec861f72f1eaa4a4c2c1eede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-buburayam37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dbf334e4744efa7892df5a3730c4895111e5c7dccb799c27f11104ec11aaf6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mute_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943c015ad5166e5009a70f298cd9cb9f8cd4ca5147dc56b435cbb218fcf57a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-toge94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98b523146717f64496a30873f983703dc2564ac952767d4bc1e6548ba40b462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-nasipecel85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc5e7fe8e917adfffafee8fcebfccb1dd907ee8b0d1949791ac61b10a47c529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117155 Malicious code in small_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f63d8a4cdc72ccf7f67d9eec0d680c2af296482a9aa068beb672e65934772e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115311 Malicious code in kurniawan-lapis95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca3807f02db326af4312af29cf530531c203c87c6ff05c8675bd6f97d19a189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113630 Malicious code in electronic_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f01528323b148d041d59af839c463952334776deddb2bfd60b6b45441faeab97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100267 Malicious code in careful_donkey_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c745058ed6e90cbe29586e213c47218219707b729c4aa283db3e7ba68ade55ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107313 Malicious code in professional_panda-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78a6bc5fe3890ef52256c8cc8b32efef4ddaf36bdf067f82ac8620bf0b702f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...