Malicious code in avior-element-ui-markdown-pdf-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f279e5f9baee2ff306120aa1e5e7e65475542a7cf455bfcc004d35ada818c8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115553

Malicious code in centaurus-spectron-element-ui-css-minimizer-webpack-plugin npm...

Malicious code in element-ui-radiant-procyon-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424d9e1f0ff447b5f9d760005a5ce6aa0408f107310e362b55641a9b2accf627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114129

Malicious code in element-ui-radiant-procyon-xml npm...

MAL-2025-143509 Malicious code in ignite-ceres-element-ui-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979a077177e77d8dd179974db351f01ac49b8fccde97b9a54405b9175dd8ac2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141984 Malicious code in element-ui-spinner-bootstrap-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955b49c0bd95c502fd03223c8164d7331c570f17e89327a7346c250f55ee2f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141965 Malicious code in element-ui-cypress-rimraf-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 493466bc6493159f8029ee1e528708c0e1375665215a2c5504d479db8370d0c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146647 Malicious code in promise-registry-bellatrix-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1a5c501ec3299dcc8dfa9935e0f26ed824255bb5062b9cb5ddfe62fbd4f34c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139926 Malicious code in bellatrix-axios-babel-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf95012ad35bf05dc6070a021a48ea1bcca166e963aa2404e5322f93c71b73bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142731 Malicious code in fusion-element-ui-browserify-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3ceb40b6042bd1dc98340857c23502250ba04d1b033674c17a6d37bb7559a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-fornax-betelgeuse-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3404c1a6247e9db097e33c1be9d5720d9c12618365536e813f891f26d2a35942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990785 advisory. In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDNdspelementregister Afer commit 1fa5ae857bb1 driver core:...

GHSA-G8JH-VG5J-4H3F Apollo Router Improperly Enforces Renamed Access Control Directives

Summary A vulnerability in Apollo Router allowed for unauthorized access to protected data through schema elements with access control directives @authenticated, @requiresScopes, and @policy that were renamed via @link imports. Router did not enforce renamed access control directives on schema...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989458)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989458 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix initializing CQ fragments buffer The function initcqfragbuf can be called to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989786)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989786 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable will be a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989181)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989181 advisory. In the Linux kernel, the following vulnerability has been resolved: mac80211: validate extended element ID is present Before attempting to parse an extended element,...

PT-2025-45072

Name of the Vulnerable Software and Affected Versions Samsung Secure Element versions prior to SMR Nov-2025 Release 1 Description An out-of-bounds write issue exists in the handling of opcodes within the fingerprint trustlet. This allows a local privileged attacker to write to memory outside of...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988805)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988805 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Track subprog poke descriptors correctly and fix use-after-free Subprograms are calling...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988961)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988961 advisory. In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Fix potential VPE leak on error In itsvpeirqdomainalloc, when itsvpeinit...

CVE-2025-23358

NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue. A successful exploit of this vulnerability might lead to code execution and escalation of privileges...