Malicious code in comparative_fish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f606b88b3570d5f45ddb0ac16488f7553eed36fae3f6a5dadcfbfe05f33b6586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110230 Malicious code in urban_leech-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0dc80c4f4e86e1fc1ed861c288b907aefd75e3372da27c68f4002aff6135a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103505 Malicious code in hadianto-peyek97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d46e09361bba2a926c265374c536462f407897af5e22d038e1b5d8daca529dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-getuk13-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd6701c79a57f3be750bff1eaa7bb97ad1e8e59854320c62050cd8b08861da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85958 Malicious code in gita-kripik49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b88b563123121c427499334f63059d0b4084ddee5013c89ea3d6dee7ed840b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-soto68-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22ee55462b36df27b6bd42dda2329f65834df5e66b8fdbe3d875a09687808d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80560 Malicious code in parliamentary_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbc6fc3392d4bf45e212e5c4082be0182dcb8132bb52659aabb3e4111a5bf19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kue72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e7dde66d836f2f9d31c940dc0a41b6375e2da2100d56e7eb404b478fd7eeab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

SUSE CVE-2025-40109

In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure setent is always present Ensure that setent is always set since only drbg provides it...

MAL-2025-65181 Malicious code in rudi-keraktelor77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b14b695a821777a820ec90f8fd71b9f6c4a0cc7447ca85bcb43d1908030627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-soto97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cbd9191826777528d87bde9ce0ab426c101fb99ec0fa61e90e40e3042afe29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60032 Malicious code in blushing_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0900041636c4e012ef3e1b3839d1dc5f606808b3c56be1eee46d9ca21692658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in running_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d7c0b35b1f0837848c6e678a268457559339da319a00ff8feada60abc13329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-empal50-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a763ad2cbe1b63e17d032d063618475013e4da0e8b8c456aea0737df9f53c809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40109

In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure setent is always present Ensure that setent is always set since only drbg provides it...

crypto: rng - Ensure set_ent is always present

...

CVE-2025-41731 Jumo: Insufficient entropy in PRNG may lead to root access

A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the...

CVE-2025-41731 Jumo: Insufficient entropy in PRNG may lead to root access

A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the...

Malicious code in patria-telurtahu19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b6ec325245bc1f23a1878190086058fda001c7d3a7d52addaaab253503271b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50073 Malicious code in cici-serabi69-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee286f143d8883a3d8571a8e3b278c0446c611225046ef03c5614ab938ffc64c The package cici-serabi69-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...