MAL-2025-159136 Malicious code in mahnud-unofoi-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39500c8596f3f141a7e7dd38e551e5f8a61eed4ab6b226f881768b41856360f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160818 Malicious code in muklis-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2387da509c3b2c8632738b7becb6b87dfb1616df0132d316f520872fda01938c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160506 Malicious code in miracle-dok-uai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b0a3b59cfe477b7442f59638f6561be8825a421a181a4af7995572c9ad00ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153525 Malicious code in avomainah-fragoias-ofatafyfau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9527ba4bdf034a323ddfb00c51f08bdb5e1494ab82777ff4d152e811775a4f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168429 Malicious code in tealove-nameka45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abafdfba33ddc3d6bd556dfad44931e6d2ee8c3bf02f0d4564809002164a9f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156413 Malicious code in inal-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d07c7c05060558f7e7247f093f324ad10948c52a18feee2546660ed13739365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160658 Malicious code in modirai-igmao-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267474a07d86b3e799350d115e72aed60e2d2bad92ba4d75e0a55e4776243add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168801 Malicious code in tealoveness70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a53dbb021fac99d60749a62bbf74d08b2a1fdc6a75aa37f52bb2158335e33d4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159768 Malicious code in mansila-iala-maonldzodafuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bb6e52e55d2195f6c72ce9cf37d42a295f618c51d2f082be37a292751df6ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154255 Malicious code in demaf-byturaa-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989123ce63020863eab15170470b7b4f543e3fd6b3b64d1bc81b43cbd6ba7de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160864 Malicious code in munidr-nerf-tersd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a31d9ccee1a24af86824f292743d39c3ffc7ac8054ddba6bb403a7af5c6f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163937 Malicious code in pajero-cir1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85de9e368006825413b6fda3771ab4a9322fbc2db48d84e836bfe7d28e6558d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151401 Malicious code in abina-amugui-anucuamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfb2d713c1bc3cb6b3a042aa7abfb2bf57d1e690ae5174282b20724120d1141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170214 Malicious code in uyaud-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b639934a0a90fec9c091eb79b1914f6fffdbdd3787310c26f9db3078ee48575c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162652 Malicious code in nokire-kilua60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad65b23420de0a4f31f1ef043e05341aa84ceb3a52c4248120aea729b02ac1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159285 Malicious code in man-nonatai-autgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0e112da77f985547755e98e17496692b3948c4be999c45486bb5661b5f5364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170562 Malicious code in wulan-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454d3d0d6d5f842d4c82e6795470f4c212f8b5d09b75d5590f7b442d8a251711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167468 Malicious code in teagood-nalikami66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33cd5e976ff3b97299b35d0c85557965dae7e3ced9d1af3b65f87ba0083e7054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: iomap: iomap: fix memory corruption when recording errors during writeback

In the Linux kernel, the following vulnerability has been resolved: iomap: iomap: fix memory corruption when recording errors during writeback Every now and then I see this crash on arm64: Unable to handle kernel NULL pointer dereference at virtual address 00000000000000f8 Buffer I/O error on dev...

kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy

In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfsmdtdestroy In allocinode, inodeinitalways could return -ENOMEM if securityinodealloc fails, which causes inode-iprivate uninitialized. Then nilfsismetadatafileinode returns true and nilfsfreeinode...