MAL-2025-80852 Malicious code in qori-bika11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbae8a6e28a5fab2c9cef71b60be525487c1c9b5bc7670e950a3c158855a5e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wandering-crimson-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9079b1da09281bd96e13794fbdb014411465822d70f838c18e0a5e748e7fe94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71434 Malicious code in very-copper-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ad46de82c1061354c3d4eb5c5af6eca98a158775db15f8ff4193b00523311e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d070b53395981e5471521fbed60eaf857d3ed7148fd1ccbfd4956f72bde59d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61540 Malicious code in united_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aae3bdfd05b479caa36456670c7daea3aebdfc8e64646175236b99a5c131873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-jus52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c47692cf1b3bd4476718c592cdf64f064d4d56638a62c63d6097a6825a67ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

macOS XNU - Copy-on-Write Behaviour Bypass via Partial-Page Truncation of File

/ XNU has various interfaces that permit creating copy-on-write copies of data between processes, including out-of-line message descriptors in mach messages. It is important that the copied memory is protected against later modifications by the source process; otherwise, the source process might ...