MAL-2025-138691 Malicious code in equal-scarlet-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865337e196bb57a9e9e0c1ee0c5f582418cbb2f57153141c708f9c6bb874d09b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138895 Malicious code in new-azure-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da81101753f640bb6bb99ef7b9b99d6b8cff26989321016e680c4664214d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139105 Malicious code in voiceless-gold-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53227d519d545eb1eeec03693e824b3cf3d6db5cc0855ed0b7dc214fa46cfa64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EulerOS 2.0 SP12 : udisks2 (EulerOS-SA-2025-2374)

According to the versions of the udisks2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of the IPMI message stack, which could lead to an infinite loop...

CVE-2025-40192: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in ...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a zynqmp-ipi mailbox cleanup loop index error that could lead to out-of-bounds access...

EulerOS 2.0 SP12 : udisks2 (EulerOS-SA-2025-2343)

According to the versions of the udisks2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the...

Huawei EulerOS: Security Advisory for udisks2 (EulerOS-SA-2025-2374)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for udisks2 (EulerOS-SA-2025-2343)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990795)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990795 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmloop: Fix possible name leak in tcmloopsetuphbabus If deviceregister fails in...

Malicious code in agreed_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29468599c251e67fcde9e4b81ce3060cfd78e970c45fec6fc2510ebc1246ceab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kue70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d226b7fb0852dbc52c39e1f9cd3dd782b7f42056702776c14c6cd78959d4394d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-lepet56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d2e8d12ef524085f5cb0befa14c80d658115663728bf332695663b2b688a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatal_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f4acee61152fe0ceb357f6f0ebbd9c7235da6446295403d54fc4c65bbe4b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-botok22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da549713d03eab9df6073e664a77f3477501b4a959f2f85890eed6855510149f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-donat12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a51db62d7d0c9ee26bccd22cce445c9f90b36d6793315319821dada9558a6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-sate42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9d3538ffcdde19c731b6e799ed9dd7fbffe5e77618ac3e101c7adccb27de975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-lapis23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71509075529efc3f3f006766c3bcb56c891b49507622094b078341adab33a56d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specified_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd51f83dc69d21de933f66be02456741c367c9999ddaac791d6ccc7f1caf55d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...