Malicious code in wibowo-saguer97-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79df4bce59381cce4782599fa1d00f6372fdd4541802135741c46bee5159402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tapai83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ab378446a809a73de255959cf70c4384145e6abd7f43fa931476382ee955c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-nasipecel91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b330a28f4cc4a3979f99f06856fc25e27ee4ac08f3d78454a0ceffa61c74d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89608 Malicious code in putra-soto47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b24fe886ebd9b0374fce1c826ef451fb227223e0d8b87c473c5c3fe23935248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87799 Malicious code in lina-esdoger77-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d6b4bf528c55ce78e099165921e0a770db6ba99e614cdf92c903684ef9e1a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-sroto16-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1546cb2df615d72bd35b462fecf3d7a09de2c7f632bd2872a77506e681dbfe95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-kembang92-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 098d3d3106a0fab463d2cff1f40df32ae1848df49a3db62b0ca4785d8ef40d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unsightly-gold-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b33bc4d79db5cb884bd14ddba220d2046c42655d7c3fedf0d81092c1aeeea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66732 Malicious code in alleged-aqua-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd480ea24df9b0bbf1c329bac6ee999198d1a94ed65c126f94d44ad21b2b5af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striking_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac422a6ab3493c581cfdfe0d705d1882f05df8177d907c3eda8e8d323d21bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-rangi45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56539dca112e2ba0ed583638ed344e5b7e61fd6b30bdb1ec12e57800bea44ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-49953 Malicious code in budi-lutis24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d13fc402164427836b71b307792739dcfa8bc667b7d46b87d1951a6cbe526b The package budi-lutis24-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989992)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989992 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmfsdiodsglistrw This patch fixes a...

osbuild-composer security update

132.2-3.0.1 - Switch to UEKR8 repositories for OL9.6 Orabug: 37962207 - Add support to create OpenScap images JIRA: OLDIS-35301 - Simplify repository names JIRA: OLDIS-35893 - Refactor patches to fix some naming and set a correct kernel for Oracle Linux Orabug: 37253643 - Support using OCI...

CVE-2025-62401

An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment...

EUVD-2025-34648

When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-54805 TMM Vulnerability

When an iRule is configured on a virtual server via the declarative API, upon re-instantiation, the cleanup process can cause an increase in the Traffic Management Microkernel TMM memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not...

Apple’s Bug Bounty Program

Apple is now offering a $2M bounty for a zero-click exploit. According to the Apple website: Today we’re announcing the next major chapter for Apple Security Bounty, featuring the industry’s highest rewards, expanded research categories, and a flag system for researchers to objectively demonstrat...

PT-2025-42273

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s block management queue blk-mq subsystem related to double freeing of memory associated with request tags when the number of requests grows...

SUSE CVE-2025-39961

In the Linux kernel, the following vulnerability has been resolved: iommu/amd/pgtbl: Fix possible race while increase page table level The AMD IOMMU host page table implementation supports dynamic page table levels up to 6 levels, starting with a 3-level configuration that expands based on IOVA...