MAL-2025-184068 Malicious code in mitouko-on-lakoikk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e4a3396e49a4dfcd44be3a09a68d3704bf06c8b41635a7d588e3935eaa2bdd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182099 Malicious code in gocay-guga-visagoijhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8ac2d0ee08d6f335aaf1b7fe7e8c89fd9e0c70ae5f08834ac28cd42a81a64e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184160 Malicious code in modaiv-klvu-ibabavfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4adffd6cca989d61e55179423714628602cd11cfe917fb9b761d034081d81f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181780 Malicious code in avangi-oliuka-tamoaiki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673878ced58cbe79afa9f467bc2ae315afe8e918f0f64ce23d34b5a2daf6e5c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183534 Malicious code in lomi-fis-fakiugaubas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570e595b44a7d66efaef6900ed2e7dfe1fa0828a10e4828b46263f1b829277f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184536 Malicious code in mokok-lukaunai-huaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e72276814163d204433c15ddd04389d0e3af9e1e85d320d728b35bb3fed15c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184725 Malicious code in oloc-uyg-uhitaggadafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e266b337ddfc3470a302ab5d938c09b0b497fe9fb32477c92c96cffe9f4d10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 895ea27a642d99b7ed0b5dd4313ab9a0aba0566f25c945c5f8db8f776271591f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-uavcseqinsdayaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 097b26d00445b9c3877e6ba680e76774c91c3e0d535c3733cdb892801038e202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ahagafujiafdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d8ee48a398fea1b6f10abc4d9cf2793c8de58e83a9f6f2a137aa3efdc1bada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184486 Malicious code in moki-luni-huojakiavugim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5234a4f70088802541d2712233078e3f8e610d790f1d4cad5ff036cead5e57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181836 Malicious code in avangs-olioms-nolisdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892a95c133a9a85fa6f61978fbdffa5f087cd0bb847fdd5016ccbb5675ec7c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

UBUNTU-CVE-2025-40196

In the Linux kernel, the following vulnerability has been resolved: fs: quota: create dedicated workqueue for quotareleasework There is a kernel panic due to WARNONCE when paniconwarn is set. This issue occurs when writeback is triggered due to sync call for an opened fileie, writeback reason is...

CVE-2025-40196

CVE-2025-40196 concerns the Linux kernel quota subsystem. A writeback-triggered flush could trigger a kernel panic due to MEM_RECLAIM flag mismatch when quota_release_work runs on the non MEM_RECLAIM queue. The patch adds a dedicated workqueue with the WQ_MEM_RECLAIM flag for quota_release_work t...

Malicious code in @akunsansan0/kopi6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84676474d07000c89959bb5e3f38f9e05ed85e8f43fc8cdf165f03f2d2d3ebe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4642f9fda8b5e9d61b55a0c4b891e0547c4e0173eb462ca26f5883ff293cbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf57ad73779cbb8da2740de34e92a8cbbc3d23fcc0718aa95ce0946118a1df25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30432758b1d484b88d8d61f8109e9450f98d8755a6bbaff4b3d4ddafa9bc52ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e925b928e8cc2ebabbc5316670e9ee5efaf8b82a10e719b6ef8c7f389ef7791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gntc_94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b361b241a353cce33e3df6a9c52d2054202e85937c822b65f8b096a8f4e4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...