MAL-2025-166510 Malicious code in syahlan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca333eb7fa88cc9df6db7ddcfa724d37fe733ca4791e09389a66d80cf90a3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151973 Malicious code in aibopuna-mobiple-amra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad741c9f9899bd75cb9b330ee1ea670c7b8f31a081a1ca5fb14a1fc9583be07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156742 Malicious code in inufi-gobai-jagr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b258117409834caea686bf8b68297c1f63769e02b4d0a8040d76cbb7d183aba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150704 Malicious code in @miptaa02/gzaody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb106892914853e071fee0633abb1a36b24bd0d42e4b8aac9cdf1ef0ff1cf970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161325 Malicious code in nabuf-ogauof-dofuafosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9163dee36559aed87eddb47b7cfcbaf4186cb4a181dc2559270cfadd5a0979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155870 Malicious code in ibanuni-otai-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1853c44ac8e62f3face7d54f9988f60c55df04626284af232987e20d5a925ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150626 Malicious code in @miptaa02/fgg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d95cfb504a218adf7650fed0c7ca71a75aec67542a7ba2b255faac13255973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160472 Malicious code in miracle-dibok-iklu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a784564a6d3f5bb60849370c73d38d457a4bf25cb1bdcea5211eda61466a1ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154525 Malicious code in diago-kulpo-luai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7156c39f881db38f4b8bbc68635c65bd62cdc1d66b7086d511d8520cd84e5470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160302 Malicious code in messi-buysa-tusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487aa0b56711975b15f16b8382de878917368c377f3ca44239dd73fd14849164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163779 Malicious code in nudela-gagaghagafafh0fhf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d456fc98c08c26e35c5e15fe52da0c2be090471478804c5e9e143610b2a8d409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158536 Malicious code in lookingan-namakiki27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0a7902465cb6437ae617356095fa92e701e7c0e4a4d7d727ffb567409b30d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153791 Malicious code in bintang-tea41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a681a5d31ce2cbf9c9cfecd4c65b7b8c5a2efa3cd32eb2286087cee958cbe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152038 Malicious code in air-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cfa9285a9103f32549f361dffaa6064069d18adfbf53c6b412d2866f58ebd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-9316

CVE-2025-9316 affects N-able N-Central versions before 2025.4, enabling unauthenticated sessionID generation and potential session hijack. A nuclei template and advisories describe it as an authentication bypass; mitigations cite updating to 2025.4 or later. Some sources also reference combining ...

CVE-2025-40174 x86/mm: Fix SMP ordering in switch_mm_irqs_off()

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix SMP ordering in switchmmirqsoff Stephen noted that it is possible to not have an smpmb between the loadedmm store and the tlbgen load in switchmm, meaning the ordering against flushtlbmmrange goes out the window, and ...

CVE-2025-11962

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in DivvyDrive Information Technologies Inc. Digital Corporate Warehouse allows Stored XSS. This issue affects Digital Corporate Warehouse: before v.4.8.2.22...

EUVD-2025-124978

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in DivvyDrive Information Technologies Inc. Digital Corporate Warehouse allows Stored XSS.This issue affects Digital Corporate Warehouse: before v.4.8.2.22...

Malicious code in astro-izar-enceladus-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5b63fbc2117df1a11a114e5aadfed4eb770749bddd0c8d2a0b2c83a7d4874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-sqlite-centaurus-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16783791eda5125cdf43a24b575cda8da3c800a4bbac7fb2e98a57d8475c7841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...