EUVD-2025-113806

Malicious code in event-atlas-spica-perseus npm...

EUVD-2025-111963

Malicious code in kaus-materialize-event-prettier-plugin-markdown npm...

EUVD-2025-120591

Malicious code in webdriver-manager-xerxes-event-bulma npm...

EUVD-2025-124485

Malicious code in nightmare-event-blitz-cosmiconfig npm...

MAL-2025-142315 Malicious code in event-hyperion-gatsby-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ce354f9451bace74524238b8c15adea7ad047426a0bf61a876cc44abdf5289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142443 Malicious code in fetch-event-cosmiconfig-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553b1de624bc1c101df86ed334fbb6c5575ad72d38d45302ba2c4709aff2df39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142308 Malicious code in event-centauri-hermes-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b18852ada8f89c69391c09adc9da0f5888546f603e7fbdedb92e8893f622d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123024

Malicious code in quantum-commitlint-config-angular-event-firebase npm...

EUVD-2025-113780

Malicious code in event-transform-electron-builder-draco npm...

Malicious code in sagitta-sadr-taurus-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1723df4b26e2738054b627a285a7cbbeb1598dce50f0dfc002afa5a0d00f5358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115157

Malicious code in commitizen-zenobia-event-pegasus npm...

EUVD-2025-113912

Malicious code in eslint-config-event-convict-zenith npm...

MAL-2025-146309 Malicious code in pm2-reveal-md-event-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea958e760b4bb93d44dc8d81957905e8fd0119c466631ef84e6172b11e0b8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145002 Malicious code in mira-atlas-event-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d0b59465aeb110ed77aa5dc35e61cee72f2d0b21f1d84fadeab03f8f243a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148971 Malicious code in uninstall-sync-apex-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189409f4dc200c6e26d27168dc6d08f0262204ea0a085b6a5af402e6a94c250d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142314 Malicious code in event-html-webpack-plugin-json-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875e00bfa3e1b4edd4e8060b916a67fb8cd83337e82e497bc92c17e79e411199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111113

Malicious code in mira-atlas-event-betelgeuse npm...

kernel: HID: core: fix shift-out-of-bounds in hid_report_raw_event

In the Linux kernel, the following vulnerability has been resolved: HID: core: fix shift-out-of-bounds in hidreportrawevent Syzbot reported shift-out-of-bounds in hidreportrawevent. microsoft 0003:045E:07DA.0001: hidfieldextract called with n 128 32! swapper/0...

kernel: HID: core: fix shift-out-of-bounds in hid_report_raw_event

In the Linux kernel, the following vulnerability has been resolved: HID: core: fix shift-out-of-bounds in hidreportrawevent Syzbot reported shift-out-of-bounds in hidreportrawevent. microsoft 0003:045E:07DA.0001: hidfieldextract called with n 128 32! swapper/0...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990865)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990865 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: cevt-r4k: Don't call getc0compareint if timer irq is installed This avoids warning: 0.11805...