EUVD-2025-179683

Malicious code in cold-hot-beta-log-daemon npm...

Malicious code in tau-fork-hot-web-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1535674fe21c755cbdb872d3615e3794dce7ac1ab4df9d0b4982a0903171a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visualize-validate-array-hot-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5405559277835b28bc4c8bb6db51998aa22c4fd91d1ef31c819a28799cc347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176528

Malicious code in sanitize-hot-quick-log-byte npm...

EUVD-2025-178512

Malicious code in hot-float-moon-unix-fork npm...

EUVD-2025-179928

Malicious code in byte-assert-finally-hot-sanitize npm...

Malicious code in scale-hot-tree-cache-execute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca31f523c05889fdf9ef41a4517c7fe41532a653c9225ca1d2fc0b4f96c7b705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177790

Malicious code in mock-parse-earth-export-hot npm...

EUVD-2025-178511

Malicious code in hot-thread-cold-fast-epsilon npm...

EUVD-2025-176059

Malicious code in tau-fork-hot-web-big npm...

MAL-2025-188930 Malicious code in psi-monitor-old-hot-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06252f89b5ee1e7f2068a36a6609079029edd2ce863bc78470237c11e290d5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178960

Malicious code in export-hot-cold-orchestrate-awk npm...

EUVD-2025-179759

Malicious code in char-hot-import-public-process npm...

EUVD-2025-176945

Malicious code in psi-monitor-old-hot-dog npm...

EUVD-2025-176505

Malicious code in scale-hot-tree-cache-execute npm...

Linux Distros Unpatched Vulnerability : CVE-2025-40194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: intelpstate: Fix object lifecycle issue in updateqosrequest The cpufreqcpuput call in updateqosrequest takes place too early because the latter...

AZL-70094 CVE-2025-40194 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: cpufreq: intelpstate: Fix object lifecycle issue in updateqosrequest The cpufreqcpuput call in updateqosrequest takes place too early because the latter subsequently calls freqqosupdaterequest that indirectly accesses the policy...

CVE-2025-40194

CVE-2025-40194 affects the Linux kernel cpufreq Intel_pstate driver. The vulnerability arises from an object lifecycle issue in update_qos_request() where cpufreq_cpu_put() is invoked too early, while freq_qos_update_request() may indirectly access the same policy object. The advisory notes that ...

CVE-2025-40194

In the Linux kernel, the following vulnerability has been resolved: cpufreq: intelpstate: Fix object lifecycle issue in updateqosrequest The cpufreqcpuput call in updateqosrequest takes place too early because the latter subsequently calls freqqosupdaterequest that indirectly accesses the policy...

CVE-2025-40194 cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()

In the Linux kernel, the following vulnerability has been resolved: cpufreq: intelpstate: Fix object lifecycle issue in updateqosrequest The cpufreqcpuput call in updateqosrequest takes place too early because the latter subsequently calls freqqosupdaterequest that indirectly accesses the policy...