MAL-2025-184887 Malicious code in sonic-ijos-afh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52dab8981a3f6f493c8c7fb832a1520fa887b6450486664f13d5f3477dc6248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183534 Malicious code in lomi-fis-fakiugaubas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570e595b44a7d66efaef6900ed2e7dfe1fa0828a10e4828b46263f1b829277f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183340 Malicious code in liobc-ug-aag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d1eff92455378f34d0e5e4541bc3992cba06772b6bcc31bf716ea2d60eea57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185344 Malicious code in unise-kit-bograida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8407299fc7f1eafdaf7d3e14d8942d36fc6a951270d72b9ad1839e9e2d0c084d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182250 Malicious code in hitale-irhar-aaedde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4953703c6102ff493b3aea0c1e569395ded7238ffa6e424cc48d415d83e0b900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PYSEC-2025-112

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

DEBIAN-CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

AZL-70103 CVE-2025-40197 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

UBUNTU-CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

CVE-2025-40197

CVE-2025-40197 pertains to the Linux kernel media: mc driver where the minor number is cleared after device release, which could mismanage device lifecycle. The vulnerability is fixed in the kernel by clearing the minor number before put device, as noted in the advisory and linked kernel commits ...

CVE-2025-40197 media: mc: Clear minor number before put device

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

CVE-2025-40178

CVE-2025-40178 affects the Linux kernel. The issue arises when task_active_pid_ns(current) returns NULL, causing a NULL pointer dereference in pid_nr_ns and triggering a kernel panic. The description states the fix as adding a judgment for a null ns in pid_nr_ns, addressing the NULL-pointer path ...

Malicious code in gntc_94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b361b241a353cce33e3df6a9c52d2054202e85937c822b65f8b096a8f4e4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039ef11a13efbc33e5f5fb9dc1f9ca288598ead02e26ee795bdc28d6c7e5e5fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf59e5b808b0358ac24f3b067217b9d9c11b610639413d35049141b0ee976e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181264 Malicious code in @akunsansan0/jorelat16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca45b312a3df905e4255e13fa493405d6cbe6bcb0a5b9927d1c42baf3d23dd98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4b0a1b5b7fd0152f065d078d7a699cad4e858c8dcfaba5bb42eda600fe4e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181326 Malicious code in @akunsansan0/pucuk12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b214b0cc1b7c6e26dd715953103a2c0c0bbe764a343f4e86757ea2b04b8bd77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...