MAL-2025-148066 Malicious code in socketio-webdriverio-mira-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6da89110ef3180e4470deb1d394bd94462f73c05afdca30d9e62cd95097f440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111584

Malicious code in loop-quark-rimraf-hyperion npm...

EUVD-2025-111587

Malicious code in loop-loglevel-rimraf-despina npm...

MAL-2025-138691 Malicious code in equal-scarlet-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865337e196bb57a9e9e0c1ee0c5f582418cbb2f57153141c708f9c6bb874d09b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138895 Malicious code in new-azure-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da81101753f640bb6bb99ef7b9b99d6b8cff26989321016e680c4664214d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139105 Malicious code in voiceless-gold-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53227d519d545eb1eeec03693e824b3cf3d6db5cc0855ed0b7dc214fa46cfa64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of the IPMI message stack, which could lead to an infinite loop...

EulerOS 2.0 SP12 : udisks2 (EulerOS-SA-2025-2374)

According to the versions of the udisks2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the...

EulerOS 2.0 SP12 : udisks2 (EulerOS-SA-2025-2343)

According to the versions of the udisks2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a zynqmp-ipi mailbox cleanup loop index error that could lead to out-of-bounds access...

Huawei EulerOS: Security Advisory for udisks2 (EulerOS-SA-2025-2343)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for udisks2 (EulerOS-SA-2025-2374)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990795)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990795 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmloop: Fix possible name leak in tcmloopsetuphbabus If deviceregister fails in...

Malicious code in specified_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd51f83dc69d21de933f66be02456741c367c9999ddaac791d6ccc7f1caf55d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 312b8e26f02912661a6da42e626b76ca53b086c60258ecebb4ec4a7256297488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-botok22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da549713d03eab9df6073e664a77f3477501b4a959f2f85890eed6855510149f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatal_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f4acee61152fe0ceb357f6f0ebbd9c7235da6446295403d54fc4c65bbe4b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-lepet56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d2e8d12ef524085f5cb0befa14c80d658115663728bf332695663b2b688a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreed_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29468599c251e67fcde9e4b81ce3060cfd78e970c45fec6fc2510ebc1246ceab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kue70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d226b7fb0852dbc52c39e1f9cd3dd782b7f42056702776c14c6cd78959d4394d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...