Fedora 43 : linux-firmware (2026-16c8693020)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-16c8693020 advisory. Update to 20260519: ASoC: tas2783: Add Firmware files for tas2783A projects add firmware for MT7927 WiFi device Add HP ISH firmware for Intel Panther Lake...

Fedora 44 : linux-firmware (2026-2b07c67f06)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2b07c67f06 advisory. Update to 20260519: ASoC: tas2783: Add Firmware files for tas2783A projects add firmware for MT7927 WiFi device Add HP ISH firmware for Intel Panther Lake...

Astra Linux - уязвимость в linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: xhci: Fixed a issue where a NULL pointer dereference could occur during full-speed re-enumeration of devices. When re-enumering full-speed devices after a failed “addressdevice” command, a NULL pointer dereference could occur...

2026.2 IPU - Intel® Processor Firmware Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-35979 Description: Exposure of sensitive information caused by shared...

Astra Linux - уязвимость в linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: xhci: Remove device endpoints from the bandwidth list when freeing the device. Endpoints are normally deleted from the bandwidth list when they are dropped, before the virt device is freed. If the xHCI host is dying or being...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-006699)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006699 advisory. In the Linux kernel, the following vulnerability has been resolved: xhci: Remove device endpoints from bandwidth list when freeing the device Endpoints are normally...

EUVD-2025-117235

Malicious code in mechanical-amber-panther npm...

Malicious code in orthodox_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de77ecea0ba1406ca2ecdfce59fc4e4348be1c608cb64e168c947511c8461bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-105949

Malicious code in decisivepantherz3n npm...

EUVD-2025-95878

Malicious code in orthodoxpantherz3n npm...

EUVD-2025-106012

Malicious code in confidentialpantherz3n npm...

EUVD-2025-91829

Malicious code in fixedpantherz3n npm...

MAL-2025-114055 Malicious code in fixed_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faffc4c2dc0fe658f5dcae9cd65190aec0c9b4bcff30cfb85f9af7612ca6d3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civic_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab4fa97f5479098ce810331eba414147b4b684281e186517a598beed309a94a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74763

Malicious code in decentpantherchocolate-63 npm...

EUVD-2025-76160

Malicious code in nutritiouspanther-excellentdev npm...

EUVD-2025-75775

Malicious code in roundpanther-silentdev npm...

Malicious code in round_panther-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009dc36112545337483478ef6de082446bb0bc324e0e5d2d96570fd232ba4c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rolling_panther_purple-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627eedb485e057e34481e3e2a0879159c3d77f9c125b84bb82f26c92a6a30903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77481

Malicious code in usefulpantherscarlet-9 npm...