MAL-2025-144706 Malicious code in markdown-pdf-restart-scripts-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f3e2a159afb43d6be262f04344aa545c34ee9ffaac9abbed05a6f0c951a763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-nightmare-leda-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fbe40f02d657a7917d90b09bc7249a176e5ee2697ec8b356d4d57be89d66fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139022 Malicious code in spare-chocolate-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a627c45b9b21cff9b80758c834e1de92978da4843201f45e2f092cf4d86227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the BPF validator not properly rejecting negative offsets in ALU operations, which could lead to the execution o...

Linux Distros Unpatched Vulnerability : CVE-2025-40123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Enforce expectedattachtype for tailcall compatibility Yinhao et al. recently reported: Our fuzzer tool discovered an uninitialized pointer issue in the...

Apache OpenOffice 安全漏洞

Apache OpenOffice is an open source office software suite from the American Apache Apache Foundation. Apache OpenOffice suffers from an out-of-bounds write vulnerability that originates from out-of-bounds writes to memory buffers, which can be exploited by a remote attacker to crash the program...

Malicious code in candra-saguer25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628773827b66e14ae8b061a2e8b2150f6580cd302733b3b0daa7efb04d0c170d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134311 Malicious code in indah-mendoan90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f992c4234eceb6baf7e477c83c2f1a6dd5ed2ed4bfc700309bc6cc68e8d27a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e61fb913d5c158ad68befa6548fab7783e4b8763e63d3a3fc764fb4449fd9a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b4066d842371678c1c4455b78bae84beeb0ebd09d63807f686819687db8bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136350 Malicious code in putra-telurtahu23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e907eda7b39fc04bcf1d4983933bccb732162857310e3c7c71b105a5672d5323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136278 Malicious code in probable_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a04928ba604442ee7f560941fb5e5594de06faccc1b6d33d1ac45747c131ca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138029 Malicious code in wibowo-gembus53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4bc771a2d8415b32641572031b5c96664022d9dd1865669270fdc74a1af98f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-kue97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b6319bcae58b38e2a88bb88b07537d4c4cf93ab82bc771a900d9707d09cb5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130071 Malicious code in satisfied_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a53ec5a47a16dc828bf3331cbda6bc891392132fefdd7dc017405be52bc22084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-kue1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3374d807e0d266a2f45f55f4c7fffd432fe025f4b3e9cd0a61bfad32aecbaeaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-dradag52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e09b0ed1e4dccffb8250837412070043c924aed8806ac00f4f3d2ebce7fb8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gastric_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f0be051a156d0a4e66a741bc05ede2e50cac91c38a2bbcb1a9d1dbf6ad484f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131779 Malicious code in zaki-rangginang63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40bf5d62eb39a44d48d4cab034051bb995d7e42c0679177cd394091aa3d4fd34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125586 Malicious code in comprehensive_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ace602ade28eea7cf52e14933e0d68759d764b2e73030bc84b9c97f9471776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...