MAL-2025-166981 Malicious code in teagood-lokina19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d395ab37fe24af4e7dcb081f4a7b58897df170ff03cd0e6363adbd327e60f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156292 Malicious code in ilop-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d6d253741987c6ce03735fa226dc07885df2f7d3ea534f51957a4c1a9a4185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156008 Malicious code in icha-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf34996fad6689e528ed366289df80066952bc5e0c7be2820443016c2275ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163511 Malicious code in nokire-zabuza23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59dccb0cb40e6a2239607c8feae865971d717277b33047820b26d8fa1f89c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155290 Malicious code in gifa-ota-uauafdfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39dc4e206f8c760992513e318679f0cecf09e38a6c498bf71a3942107ade9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161357 Malicious code in nabuf-oguof-dusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ca3cc820c60e717211cbb0a5f638da4cfe72c822f1496022d7eb1429a18a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163013 Malicious code in nokire-nakala59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0f8f3826c35da96eafdb6674faf96728e57ce1746cf3dde36b78be49fb87f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163812 Malicious code in nudela-ofgfaf-gajafhhagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4a8025659d4944804f97437924453b9f5e47d338963325c0843e6a23833696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153261 Malicious code in avminasah-agaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a176609799de4183d419674a06221b012f3fd982aba2092c296a100731a0e3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167021 Malicious code in teagood-lokina55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c23b263e656c5643c50aeb1ba6243cdce8606ecf4a1dcfc1b85325345bcdc04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162117 Malicious code in nokirane-asgaka5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176007898c98a0247ea10d183808e3dc097c9873a8397531d833afa523413f39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161036 Malicious code in musik-daitv-bdot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e904d277be4502c63c9a1caaf71967dff00d7f2a92cb38593cff780c8604d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168801 Malicious code in tealoveness70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a53dbb021fac99d60749a62bbf74d08b2a1fdc6a75aa37f52bb2158335e33d4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161786 Malicious code in namae-nadua-maavwr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e02503797781102d77ee474a8d77bb623e017dc5c2fc7f74d2ae69e725695a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154858 Malicious code in fadila-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7788e5c796843b69379495ae7cd2d4e0c9594a61434045c326ecda063e11310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155877 Malicious code in ican-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 470f3ca0065dbd4cb1a6237b258d1cd16e84038bba310ee947d92d4254a8d018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163419 Malicious code in nokire-sekiya30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63651315633df79734a0aaa19ad6aba138fbed61b87bb1b89a70314b62e8072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168410 Malicious code in tealove-nameka28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212e23350ff834f687bf8066f645aebf298a13e7e227ba6df6a1cc3b3782ed4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: iomap: iomap: fix memory corruption when recording errors during writeback

In the Linux kernel, the following vulnerability has been resolved: iomap: iomap: fix memory corruption when recording errors during writeback Every now and then I see this crash on arm64: Unable to handle kernel NULL pointer dereference at virtual address 00000000000000f8 Buffer I/O error on dev...

kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy

In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfsmdtdestroy In allocinode, inodeinitalways could return -ENOMEM if securityinodealloc fails, which causes inode-iprivate uninitialized. Then nilfsismetadatafileinode returns true and nilfsfreeinode...