MAL-2025-188761 Malicious code in polaris-build-event-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5870c41fb0c9b2494b76d327532e4ff9b679ae512b5700ee30c24b2d374aed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-alphard-event-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516651765e6ec2134077f6e0128dfeea44e2a4ea76469186f299a7daa07bf2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-31645

Uncontrolled search path for some System Event Log Viewer Utility software for all versions within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege...

EUVD-2025-150387

In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctpdisposition sctpsfdo51Dce If newasoc-peer.adaptationind=0 and sctpulpeventmakeauthkey=0 and sctpulpeventmakeauthkey returns 0, then the variable aiev remains zero and the zero will be...

CVE-2025-40207

creationtimestamp| type| source ---|---|--- 2025-11-13 00:11:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5huwca35x2a 2025-12-23 14:57:28+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3manz3ha3ok2r 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-40198

creationtimestamp| type| source ---|---|--- 2025-11-12 23:51:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5htsunc442x 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2021-4464

creationtimestamp| type| source ---|---|--- 2025-11-12 22:40:25+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hptlpwk742 2025-11-13 02:16:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5i3w72lf72a...

CVE-2021-4463

creationtimestamp| type| source ---|---|--- 2025-11-12 22:40:24+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hpthcpoxh2 2025-11-13 01:48:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5i2dygsf52s 2025-11-13 21:02:33+00:00| seen|...

EUVD-2025-136045

Malicious code in itale-dci-rfsrgget npm...

DEBIAN-CVE-2025-40187

In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctpdisposition sctpsfdo51Dce If newasoc-peer.adaptationind=0 and sctpulpeventmakeauthkey=0 and sctpulpeventmakeauthkey returns 0, then the variable aiev remains zero and the zero will be...

UBUNTU-CVE-2025-40187

In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctpdisposition sctpsfdo51Dce If newasoc-peer.adaptationind=0 and sctpulpeventmakeauthkey=0 and sctpulpeventmakeauthkey returns 0, then the variable aiev remains zero and the zero will be...

CVE-2025-40191

CVE-2025-40191 concerns the Linux kernel drm/amdkfd path. The provided sources state a fix for leaking the kfd process reference when unmapping userptr: calling kfd_lookup_process_by_pid as a function parameter can hold a reference and leak it, and can miss a NULL-pointer check if the application...

CVE-2025-40187 net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()

In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctpdisposition sctpsfdo51Dce If newasoc-peer.adaptationind=0 and sctpulpeventmakeauthkey=0 and sctpulpeventmakeauthkey returns 0, then the variable aiev remains zero and the zero will be...

EUVD-2025-124961

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...

CVE-2025-11560

creationtimestamp| type| source ---|---|--- 2025-11-12 07:43:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5g5q4ja372j 2025-11-12 08:10:42+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5g77xflfhe2 2025-11-12 08:52:53+00:00| seen|...

EUVD-2025-113802

Malicious code in event-centauri-hermes-rimraf npm...

EUVD-2025-124192

Malicious code in oauth-eslint-event-levels npm...

EUVD-2025-116112

Malicious code in betelgeuse-mocha-request-event npm...

EUVD-2025-113786

Malicious code in event-sedna-elektra-taurus npm...

Malicious code in uninstall-sync-apex-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189409f4dc200c6e26d27168dc6d08f0262204ea0a085b6a5af402e6a94c250d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...