thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures...

EulerOS 2.0 SP10 : glibc (EulerOS-SA-2025-2384)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be...

EulerOS 2.0 SP12 : glibc (EulerOS-SA-2025-2325)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be...

Malicious code in joko-semur48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c9d51308c2ffdf1799742a21800f036c8a3274d1802b96841a2dac6990aa2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-dradag43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ace135ed98c227c7fc71af44605110e8d8894479ef2bb51ed8519418effdee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-ketoprak12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c1461e3816d8d32c16e59b399d0ba0c5b48b20bee46fbbe2002b9b13a956e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kacang51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b2e467aa7c9f5deb3fe3d8b17c38b00f4629413c77e46568209003203466497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133857 Malicious code in gita-rujak71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec3a0dd8087195a0c64c0af1e4fa822c8f6b5379ab341bbd0098c641f38d6192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elaborate_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b532b16201be02b11ba1ee633cd1b2ff94324d565f1ba48ae2558bda61a61cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-mangut28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4caf7249430460f1785b211252626e612f290e0cc0db90d5978c297efb2eebaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-klipo70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d00a89a21ef1cae2ff4b5ad8502429ca8c7b0947c9d9daba71d029e3eb92dba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kupang23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4977ec82a246832d5b1d00ab0df65606af17af12169bf4dfba067b360f268e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136260 Malicious code in pregnant_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e1fd45770307180acd562bc4bfc779857394c9bc3e7bebde42da99a9aa4265c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-moci70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239d59cfefb50c3069ad5bc9384726df527882994cf4388828d591c2e56542f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137045 Malicious code in slow_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f731d67a68c950d922382e6b13673e4e247d78be180ac204e1c2029546285c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137799 Malicious code in vida-taiwan90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed7a10ea35096f032d93bf89f39115a8d0fafca3d8107a25a484f878b53b2591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137147 Malicious code in surya-mangut54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c59ea51059bd114f9d4a086b24e5e1c78ede210b726b35046ecedf0a977e083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132631 Malicious code in convinced_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47419431b9bbe011474a4d7c603bf91b9d68e891d5d307dfa63268595e89e10a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137817 Malicious code in vina-kepok35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b89398d3354d44411dac2c5da6e37b04c1f3b3745c30e69acaf29b765647b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138574 Malicious code in zul-toge84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b500128b509918acd84abb6326569897b44ee1424de7dd9bce9a6808698a6b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...