MAL-2025-95905 Malicious code in planned_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99de5bcb574e273813a6c09df151b8f66a7467182117ea57bff559e78e01158f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-62647

Malicious code in plannedwoodpeckerz3n npm...

EUVD-2025-62651

Malicious code in plannedcrocodilez3n npm...

MAL-2025-95907 Malicious code in planned_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb375668e7ddf6c5a4b2129f2b86987531eef44690eadaa1ecb16e5440c7d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-62649

Malicious code in plannedmarmotz3n npm...

EUVD-2025-62650

Malicious code in plannedeaglez3n npm...

EUVD-2025-67782

Malicious code in planneddormousez3n npm...

EUVD-2025-67783

Malicious code in plannedcockroachz3n npm...

EUVD-2025-52750

Malicious code in planned-amethyst-silverfish npm...

Malicious code in planned-moccasin-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2380f7c7d5676b78e8c4b75f6a1a41af3021286a5f5b3bea45cf2d522182b98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52747

Malicious code in planned-sapphire-marmoset npm...

EUVD-2025-52748

Malicious code in planned-orange-possum npm...

EUVD-2025-52749

Malicious code in planned-moccasin-sparrow npm...

Malicious code in planned-amaranth-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1294a944e54ed5aa67c36b18af359324b140f69b8f411f1fea3d3aae1f03f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69899 Malicious code in planned-amethyst-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1dbe179b2e68e2538332172aa823d6f5881c05992b72625f43b5269ed12cf42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52751

Malicious code in planned-amaranth-constrictor npm...

MAL-2025-69901 Malicious code in planned-orange-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b0b3a8340e35bbf9fe0eed06b78ffc8672f99e9f4bb680d762b35468298608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

SUSE CVE-2025-61581

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

Compromising Trusted Execution Environments through DDR5 Memory Bus Interposition

Summary Researchers successfully executed a physical bus interposition attack targeting server-grade DDR5 memory, compromising the confidentiality of encrypted data during runtime. AMD does not plan to provide mitigations since physical vector attacks are out of scope for AMD SEV-SNP. as detailed...

RDSEED Failure on AMD “Zen 5” Processors

Summary AMD was notified of a bug in “Zen 5” processors that may cause the RDSEED instruction to return 0 at a rate inconsistent with randomness while incorrectly signaling success CF=1, indicating a potential misclassification of failure as success. This issue was initially reported publicly via...