MAL-2025-156213 Malicious code in ilang-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 598cde3a5005d5419030b7e4251f9ff58e4a093a8f85758d7d64dd482816f14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151766 Malicious code in aciyua-idusut-dajukua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad9b24546aca2f238517033b98617d2b26724cd51483137f7ccd47ba35d25065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170222 Malicious code in uyaudtu-tyt-dat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5209296fbe9495b5d0c1b816ee8e9818246bd95b71266783bceeae762f5bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160639 Malicious code in modirai-igamino-jimgugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1e5ceccefad3485ca4748d8e3375565762866a0547e1ce51fd10eb9bc1b042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156413 Malicious code in inal-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d07c7c05060558f7e7247f093f324ad10948c52a18feee2546660ed13739365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165981 Malicious code in siregar-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8cae9829d64ebc5e5eccfe7964b4664a942461d395ae16624540cc1ad6339a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157358 Malicious code in kamasada-nutai-kyased (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a629937fecdac8487bc8f413a3331ddb6ecc5b2ef06bef59820a7c52b6c83d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156292 Malicious code in ilop-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d6d253741987c6ce03735fa226dc07885df2f7d3ea534f51957a4c1a9a4185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151674 Malicious code in abyil-nionai-lasuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26a857d83c5e972daa63630bb53eb230d18c82fd32695fc2cd27f3b20b7cba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160729 Malicious code in modirai-imgono-jinmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74b8187970bdda132097a44fcf7e7ccdae3df31c75db282b9662f64efbad0131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164808 Malicious code in rinto-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca7b3068daad6d2d7fdff23cd0533f6c6341da7eefa94ecff3d6cd1c5e747f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150705 Malicious code in @miptaa02/gzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b67545ce67a79c8c6155432eb2bba485622ac33c4ef76c667d8fd0b1abbc822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153525 Malicious code in avomainah-fragoias-ofatafyfau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9527ba4bdf034a323ddfb00c51f08bdb5e1494ab82777ff4d152e811775a4f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159768 Malicious code in mansila-iala-maonldzodafuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bb6e52e55d2195f6c72ce9cf37d42a295f618c51d2f082be37a292751df6ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167468 Malicious code in teagood-nalikami66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33cd5e976ff3b97299b35d0c85557965dae7e3ced9d1af3b65f87ba0083e7054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158420 Malicious code in lookingan-nalako12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f65d433866b50f122dad06dd4bfa70cb9277655a6cd06a93326e9d95e254a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167448 Malicious code in teagood-nalikami48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39497b012a854d9146fd35ce8765f0cf3cbe02faa1243f9bf830f8f4532f1263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166927 Malicious code in teagood-lokika60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a037d05218e18dc0f7b8897b0502293990f4dde0320585ceffecaf0f44d37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: iomap: iomap: fix memory corruption when recording errors during writeback

In the Linux kernel, the following vulnerability has been resolved: iomap: iomap: fix memory corruption when recording errors during writeback Every now and then I see this crash on arm64: Unable to handle kernel NULL pointer dereference at virtual address 00000000000000f8 Buffer I/O error on dev...

kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy

In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfsmdtdestroy In allocinode, inodeinitalways could return -ENOMEM if securityinodealloc fails, which causes inode-iprivate uninitialized. Then nilfsismetadatafileinode returns true and nilfsfreeinode...