EUVD-2025-114399

Malicious code in dotenv-parse-variables-cache-halley-commitlint-config-angular npm...

EUVD-2025-113474

Malicious code in fornax-miranda-dotenv-parse-variables-proxima npm...

EUVD-2025-114397

Malicious code in dotenv-parse-variables-castor-impulse-webdriver-manager npm...

EUVD-2025-121967

Malicious code in sirius-jsonp-dotenv-parse-variables-perseus npm...

EUVD-2025-113458

Malicious code in fornax-tailwindcss-start-dotenv-parse-variables npm...

EUVD-2025-124205

Malicious code in nuxtjs-typeorm-apollo-dotenv-parse-variables npm...

EUVD-2025-115766

Malicious code in callisto-levels-subscription-dotenv-parse-variables npm...

MAL-2025-139393 Malicious code in antares-cache-andromeda-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a69f1e0e67e5d014f4810d287a413d9c3f360df647b2978a8a65cd71af5f0a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120571

Malicious code in webdriver-mocha-nashira-aurora-dotenv-parse-variables npm...

EUVD-2025-114380

Malicious code in dotenv-parse-variables-ora-aquarius-markdown npm...

EUVD-2025-114383

Malicious code in dotenv-parse-variables-module-oauth-magellan npm...

EUVD-2025-114382

Malicious code in dotenv-parse-variables-nashira-hapi-iota npm...

EUVD-2025-114476

Malicious code in development-slidev-dotenv-parse-variables-sedna npm...

EUVD-2025-114692

Malicious code in cz-conventional-changelog-dotenv-parse-variables-optimize-css-assets-webpack-plugin-elektra npm...

EUVD-2025-114387

Malicious code in dotenv-parse-variables-got-hermes-octans npm...

EUVD-2025-112210

Malicious code in jekyll-elektra-vortex-dotenv-parse-variables npm...

EUVD-2025-114376

Malicious code in dotenv-parse-variables-proxima-markdownlint-meteor npm...

MAL-2025-141715 Malicious code in dotenv-parse-variables-dactyl-hermes-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553918f29ad698a225d2b077fc60b1d34a4522e23490977aae6619892944fad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data The MT7921 driver no longer uses eeprom.data, but the relevant code has not been removed completely since commit 16d98b548365 "mt76: mt7921: rely on...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990867)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990867 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix potential RCU dereference issue in wilcparsejoinbssparam In the...