MAL-2025-184680 Malicious code in olobc-uyg-ugiafaidabiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a61d1808bad4fb04d61e9b70fedff6a0ad419a66c8cdfd994d31603d309a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagiufagugafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a537d26a3f1602b0d32cd0629586d1858929097fd1dd03ca591b48867e6125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e3d1e42a8eb4465ea10961d1ed932987bed81cebbc6e13a1d3d18fe3952651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184663 Malicious code in oliobc-uyg-ug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea70af88fcd9bab733dc89efa4fb45f7d1ccbf4e86ca102bb0fd890bca527f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-danoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fef1fd504755cc54dd947e0e692c717fcf43158cf3a9d18b2f34ea49d784c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185180 Malicious code in sonic-oig-tmoerocaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fa9c5b49b78b6e590b5266b4dc871d3a762f5e1f3073a1a4ac4864a4eb532d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181910 Malicious code in avarag-olubis-bali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1355a6c47d32088c071c6942f71ab03dd7ad91fcaef58f557105d450a482e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baiucaufaifuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2d085b354a8666bdc1ec38049622e580c50a4eb73f1ddd4cd4191b83ddebc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184447 Malicious code in modiov-kin-afu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcaa42c39978199da0e4aee9fd536fb61601b5d1318f8324d1ca82812d9fd578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscdocavgopmoigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3381a65895c92970c2afb34c013645552e67edf4afaba3fc315858ce52be965b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugaoyugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f6154af76a4afd246430d756fecabceebe3ae53c7e4b922aef36e1f56b51bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183755 Malicious code in manu-oyi-gioafisasioasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64449c07366674504895aa2987a3546e7278caf5847eff47635d1a5e27ce1115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181974 Malicious code in flights-lutag-obolavuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e079b68dc56bdfa9ffd15cbe992e95dd06d20797534d15bc0cadc39c10045f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8765cb416d290f51e091b7f41eed70c0d2949e48b83cdc84ddde54afe7c17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

AZL-70106 CVE-2025-40192 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in ...

DEBIAN-CVE-2025-40192

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in ...

CVE-2025-40192

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in ...

DEBIAN-CVE-2025-40180

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent...

AZL-70064 CVE-2025-40180 affecting package kernel for versions less than 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent...

UBUNTU-CVE-2025-40192

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in ...