kernel: net: bridge: stop fast-leave after deleting a port group

A flaw was found in the Linux kernel's network bridge module. When handling multicast fast-leave, a vulnerability exists where the system may attempt to access a port group after it has been deleted. This can occur if multicast-to-unicast was previously enabled and then disabled, leading to a sta...

Malicious code in cz-conventional-changelog-private-superagent-module (npm)

Source: amazon-inspector ca679e5bef873726be141435454053c2303e09ba8a82603c7836e0ae50b98986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cygnus-module-browserify-winston (npm)

Source: amazon-inspector 825d606cbdefc2604cd66982e1a93ddffc1006cf27f427096225845d4e019fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cursed-module (npm)

Source: amazon-inspector 8f33e4c756bc2b6484a9c8ddc7510e2b7e3dfee1ba963a77d610e61c2c897821 The package cursed-module was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in csv-module-mocha-lyra (npm)

The package csv-module-mocha-lyra was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in corsair-module (npm)

Source: amazon-inspector 0c21d47c9d59d6abd121ee300ec8e6981d0fc22576fb01ca69c06633e5e46626 The package corsair-module was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in confkit-base-module-defaultheaders (npm)

The package confkit-base-module-defaultheaders was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in common-modal-module (npm)

The package common-modal-module was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in command-xo-module-antd (npm)

Source: amazon-inspector 6fd904aec9c3a6c08fbd9825ef68e0a13af99f7a6873004f2183b1f88c4f22d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in command-module-zenobia-metalsmith (npm)

The package command-module-zenobia-metalsmith was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cold-dog-module-notify-good (npm)

Source: amazon-inspector c4c83bd10b2435c6dbd483122fd890dd154abcfcc705f21736d501c33135c704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cobrowsing-redis-module (npm)

Source: amazon-inspector 502c907b28a2866d4fc67be93a6417e535336938ce3e8c23f0f95e927c6711b6 index.js unconditionally requires./loader on import. loader.js selects a platform-specific endpoint, assembles C2 hostnames at runtime from split string arrays e.g...

Malicious code in cobrowsing-k8s-module (npm)

Source: amazon-inspector 6cde47afeee95884dc83b3dab22855db86950fd58756900af5100d1286a7c7be On require of the package's main entry, bridge.js selects a platform-specific endpoint, reconstructs remote hostnames at runtime via array.join"" string-split obfuscation oob-worker.cf100-416.workers.dev,...

Malicious code in cluster-publish-firebase-module (npm)

The package cluster-publish-firebase-module was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cluster-css-minimizer-webpack-plugin-module-rehype (npm)

Source: amazon-inspector 991ffbbf4b4673ac58b1abe23a1b69f79be0f6f847edb54bbd400cebef716b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cloud-emulate-dog-benchmark-module (npm)

The package cloud-emulate-dog-benchmark-module was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cli-module-publish-firebase (npm)

Source: amazon-inspector 5e2c574de55331c0e324822e435ebfe908647b9d1b6a58c0006c40ee7959d408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in claims-policies-domain (npm)

Source: amazon-inspector 5858353e2874492da6b051be8fa2e6061317bc0ac825838f13c6a1b2471c90b5 [email protected] executes a binary dropper on module load. index.js requires./platform, which selects a platform-specific path, fetches a binary from one of three hardcoded Cloudflare Workers...

Malicious code in claims-get-indexed-selector (npm)

Source: amazon-inspector fe924c35590524d1632020cce8e08d68b232aa0d53b0f0ecb730f3ae87e07c35 [email protected] executes a binary dropper on module load. index.js unconditionally requires polyfill.js, which reassembles network destinations from split string arrays hosts on...

Malicious code in checkout-mobile-cashback (npm)

Source: amazon-inspector 82f24faec25bf10df39c7327ce852058d9c23bb9983dae0d4b28c3843f0997f4 [email protected] executes a staged binary dropper on module load. index.js requires./shim, which selects a platform-specific binary URL from a hardcoded list of Cloudflare Workers hosts...