MAL-2025-185344 Malicious code in unise-kit-bograida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8407299fc7f1eafdaf7d3e14d8942d36fc6a951270d72b9ad1839e9e2d0c084d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185148 Malicious code in sonic-kuloig-tgviavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84af51c39cf785f2b5cd232572b5093adf96ceef4c2f288c8c956e8be42e05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181748 Malicious code in avangi-ogolia-inualum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21463c7d9d7288978044e1937674f99c07f9b3f1dff7a9ea08f6bb615fc4b5dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183490 Malicious code in lobac-ubib-gafugyfaifdagab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e2aefc55ff7d26bd2f4a9ecc571b80809f5ed2057af104f0fd77d4150d2eec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184885 Malicious code in sonic-ijos-afah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74fffe55b01a61bd9c33fabebaf37d622b6437b3f2020f1f447b4900caf6b3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183329 Malicious code in libc-ug-agufxagidug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdce5b6e0a8fbaebbc7c54c027f7c9c3ed9f5dc91a3ff6d122e28f5ac5c07a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185337 Malicious code in unise-kit-bogavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1e9f7fe755e50439044873fa2790218cc859a9f306ab853f68105f2350652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184870 Malicious code in sonec-kat-fgfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a832ed9f5989ac9ebf09a92688ff51f717a666b43aa7259c907396ddb6b5ff53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183638 Malicious code in mahnu-noy-gisostsogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45787c96f0619c2117d2249c4a27503df968c5ff5664574031532b173b58bb33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183365 Malicious code in lobac-ub-afdmafdacu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e3f4f07b1f6df276269c25fcc306c1535f1111b98da5448ee86656c357deade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182943 Malicious code in itale-adci-ykag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd9cbd18687dd4cc679686e7f9ce61ac31f672738dffffb263f0579ad73b98df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184644 Malicious code in odasv-knu-boniju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3eaa86eba0741be553b57b39aaf4d3ed186abb4275b4aa8fb8c29f06bf4216f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183384 Malicious code in lobac-ub-jafgfubaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8014eb19b402e0b51a0fa0975953a3e4bd40eeaebfa5367f901ad84e96ee10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185319 Malicious code in tunis-kt-gahuvfaduffadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee0d875b04d0a50b3e48ed7d8a366fd8b8c4a8addc70d46dc92d190d3e106af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184752 Malicious code in one-kat-ibudavafrufdaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e54d0b2aece1cd2107626f8ac0bce18b7fa78b6c41d1012cc928aef315f08aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183390 Malicious code in lobac-ub-jfggafuayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9076f49c6c9f666dc23a2461eea220abf8b06e1dd3cb2007bd1b0f5a59dbf1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PYSEC-2025-112

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

DEBIAN-CVE-2025-40197

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

AZL-70103 CVE-2025-40197 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...