Malicious code in gleaming_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505f911c5c2b2567a211ac4622b2b5ef94396b4b0132607297b5e59886e821e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78013 Malicious code in exotic_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ee9ee417e71079d9f29a4706a02a21a05d42153acb4db6e63b7b8672b811b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73093 Malicious code in gilang-miebogor2-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36cbc481b3c7d3c3a7763093aec7de3c40b3f5b247233527a93d927a38d0f897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63617 Malicious code in jaja-esdoger7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557a882d069bf5ed48771b9a9fc6ec58d8b37142dac62993c5693f7c18fd1115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66105 Malicious code in wawan-mangga74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b425f658b206cd98d3adf2d3e76ac8c030d9af6f58e73c8ccd46792e6deae01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12437

Use after free in PageInfo in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-12436

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2025-12430

Object lifecycle issue in Media in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: High...

CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

CVE-2025-12447

Incorrect security UI in Omnibox in Google Chrome on Android prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2025-12431

Inappropriate implementation in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Chromium security severity: High...

MAL-2025-57571 Malicious code in maya-klipo65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f3b7720806f013aa16cfe6ab1b1f0f395f62ce7b526fe729bfaf3db76b652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unbreakable Enterprise kernel security update

5.15.0-314.193.5.3 - Revert 'cpufreq: Introduce an optional cpuinfoavgfreq sysfs entry' Samasth Norway Ananda Orabug: 38633525 5.15.0-314.193.5.2 - i40e: add validation for ringlen param Lukasz Czapnik Orabug: 38607608 CVE-2025-39973 - i40e: increase max descriptors for XL710 Justin Bronder Orabu...

CVE-2025-12906

Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2025-64329

containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks. This issue is...

CVE-2025-11460

Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. Chromium security severity: High...

CVE-2025-11210

Side-channel information leakage in Tab in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-11205

Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Malicious code in random-packaging (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd5ed79506422d4b93a37dfbe2323a2c38acb4890701d8dec59c72d9566a413 The package random-packaging was found to contain malicious code...

MAL-2025-49288 Malicious code in random-packaging (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd5ed79506422d4b93a37dfbe2323a2c38acb4890701d8dec59c72d9566a413 The package random-packaging was found to contain malicious code...