MAL-2025-113053 Malicious code in cici-tahutek71-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d46ab13263ab7cd7000c4cf686652a33fe89cbd919a5820a200ccacca9aa9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

libtiff: Libtiff Write-What-Where

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controll...

Security Bulletin: IBM OpenPages Vulnerable to Information Disclosure (CVE-2025-27368)

Summary Application API vulnerability that exposes metadata for configurable fields due to insufficient access control checks in IBM OpenPages has been addressed. Vulnerability Details CVEID:CVE-2025-27368 DESCRIPTION: IBM OpenPages is vulnerable to information disclosure of sensitive information...

kernel: zram: fix potential UAF of zram table

In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zrammetaalloc failed early, it frees allocated zram-table without setting it NULL. Which will potentially cause zrammetafree to access the table if user reset an failed and uninitialized...

kernel: zram: fix potential UAF of zram table

In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zrammetaalloc failed early, it frees allocated zram-table without setting it NULL. Which will potentially cause zrammetafree to access the table if user reset an failed and uninitialized...

kernel: ring-buffer: Validate the persistent meta data subbuf array

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subbuf array The meta data for a mapped ring buffer contains an array of indexes of all the subbuffers. The first entry is the reader page, and the rest of the entries lay out the...

Malicious code in independent_tortoise_crimson-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5ceffac9acf6acb1db2e19a0aca361ace0e7cb3d5afaa771a518a35868e4ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearling_gecko_amaranth-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e161a370620d33a7bef5cdaa9876e7eddd5d7dd15391d5af0cdf3f5dde20de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112494 Malicious code in zany_mole_fuchsia-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128d988fbb16a7f6c3650c4cb970b298ea70776e441ab478968d56e313e2849d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112028 Malicious code in intellectual_guan_harlequin-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d894a2652def21c774ecc37f6e5d26727257402bc87d2da3f9edcc16c45e796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111883 Malicious code in external_sheep_bronze-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1984bdb68784d43e640e356c5677a54b2cd0edb6555d5238a06bc790caef9fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112168 Malicious code in pale_impala_emerald-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183beafea30c0e2e82f4a7fbddeb891effa73d7cf9f60721e7d9df081c006f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111997 Malicious code in ideal_crocodile_blue-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbe37fd8090781a3917f769fac7452ff529d0dad306029ac9cac0a7e5e407d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111652 Malicious code in agricultural_bison_lime-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c25311427d85f79d141546a304f1aa13d5af28c99a64951c8173d8ed9770481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outside_butterfly_peach-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aff2c204ebd711a672ac0641830358f79d1d336b1011a53aa4eb35bc88bbedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuous_tuna_salmon-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd0968cddbe8b84877400e7c82d19ad4bd0057611e8933433f8ac89c3e30035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crooked_marlin_blue-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd7458ebdda2cf6e94c7b1588d2cea8966b00aad8ad0cb4c3e6abcbb7bb37ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111970 Malicious code in helpless_mole_aquamarine-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78bbc7862f706db4e63fbc7bb43a277d0afe160854b6e66b46b35382b322e3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111764 Malicious code in cooing_hippopotamus_blush-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1b233edf9bf05bbe892aed745f30d4f5ae1ceb49f9d67c2af4e6f35b46ce9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111950 Malicious code in golden_boar_salmon-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6221ef9a415ea6a5b2a1cb58b4029518e596da5e1871114b9dfe14f1b8e66f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...