MAL-2025-190582 Malicious code in just-a-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b3b6dacc63b42851c61ae55e5168dbd9ff40172851cbfa980f489da54826f7 The package just-a-calculator was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-117280

Malicious code in just-tomato-swan npm...

Malicious code in just-tomato-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b49b879957372f901c553ab6a20037d0354e055a1991bfb2a9d9646e228f340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97112

Malicious code in justcarpz3n npm...

EUVD-2025-97111

Malicious code in justplanarianz3n npm...

CVE-2025-13024

CVE-2025-13024 is caused by a JIT miscompilation in the JavaScript Engine: JIT component. It affects Mozilla Firefox and Mozilla Thunderbird prior to version 145. The reported impact is arbitrary code execution via the JIT issue, with memory-related concerns noted in related advisories. Remediati...

EUVD-2025-76479

Malicious code in justtick-appteadev npm...

EUVD-2025-78941

Malicious code in justwhippetz3n npm...

EUVD-2025-81449

Malicious code in justsawfishdumbs npm...

Malicious code in just_sawfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667489eb88f788028516b20e0b2ed4d7b3f7d058f9d4723c5f261477f66daf63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104737 Malicious code in just_hornet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99b35e7b5120af16ba8ec3967adbb82b952028fa11101935d335118dc5d4ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63391

Malicious code in justguanacorequirement npm...

MAL-2025-95163 Malicious code in just_guanaco_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7147f8ba9aefda3a0ea2ffd5ac0fd7ab0dff65a8f1acbb566f7b7943e96696a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in just-gray-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7873cdf2493f3e62b43adef4234795dcaed3b9b8d92ce960566ef96efd436dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53621

Malicious code in just-cyan-cockroach npm...

EUVD-2025-53619

Malicious code in just-olive-vicuna npm...

EUVD-2025-53620

Malicious code in just-gray-sloth npm...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a code execution vulnerability that originates from a compilation error in the JIT component of the JavaScript Engine, which can be exploited by an attacker to execute...

Malicious code in just_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681b56e4a402b308d9405d07671e755f84c8fbd0ce885b514f2f539c38f690e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid bpfprogret0warn when JIT fails Syzkaller reported an issue: WARNING: CPU: 3 PID: 217 at kernel/bpf/core.c:2357 bpfprogret0warn+0xa/0x20 kernel/bpf/core.c:2357 Linked modules: CPU: 3 UID: 0 PID: 217 Comm: kworker/u32:6...