MAL-2025-188116 Malicious code in mongoose-supernova-transhumanism-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f080f91fc223896f4b99c2ef315f355058984fd6c7ad8f2a112c9c4f169b8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185668 Malicious code in auth0-stratigraphy-ursa-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a88a92b26c3c4dc2b4c25959fb6dad8e7465407b50ab1c45e96b9a750a3f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187125 Malicious code in gatsby-upgrade-aldebaran-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c001ab99214b4662862b263eac30593a78748adb121c5de870d37a660239fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-150366

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

EUVD-2025-150380

In the Linux kernel, the following vulnerability has been resolved: cpufreq: intelpstate: Fix object lifecycle issue in updateqosrequest The cpufreqcpuput call in updateqosrequest takes place too early because the latter subsequently calls freqqosupdaterequest that indirectly accesses the policy...

SUSE CVE-2025-40115

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix crash in transport port remove by using iocinfo During mpt3sastransportportremove, messages were logged with devprintk against &mpt3sasport-port-dev. At this point the SAS transport device may already be...

SUSE CVE-2025-40140

In the Linux kernel, the following vulnerability has been resolved: net: usb: Remove disruptive netifwakequeue in rtl8150setmulticast syzbot reported WARNING in rtl8150startxmit/usbsubmiturb. This is the sequence of events that leads to the warning: rtl8150startxmit netifstopqueue;...

SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2025:4057-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4057-1 advisory. The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issu...

Linux Distros Unpatched Vulnerability : CVE-2025-40194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: intelpstate: Fix object lifecycle issue in updateqosrequest The cpufreqcpuput call in updateqosrequest takes place too early because the latter...

Zoom Clients 安全漏洞

Zoom Clients is a video conferencing application from Zoom USA. A security vulnerability exists in Zoom Clients versions prior to 6.5.10, which stems from improper removal of sensitive information and could lead to information disclosure...

Malicious code in sonic-jos-afafiofiah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04ba84020d9dfc8509e469969615a44d0136b85bf9318cd208335202bbf0ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-avigyagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a61903d7e2715b95d9139648a60f9f8c6e7dbc990e773635ce6942fc2a2a72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olim-ani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e8ae5328d9c09b54afe92a4ed49508130d539863afd93bba56b926d596b012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916701b1b6ad5619f5403a69fec5786956c7eb7800ef9d35ac92ba99ffbfcd56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodj-guofagipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39e7719553c5cf6f0341c98c3fd8a57ae4c03ddb17312f63a6437a776035951c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-dka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52cd371cb4ec205b7fd12d404e58554e2dfdc1e29febefdd532c852d2c62fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-daigajuj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f8d9bf88172011d98730eecc58b4fda1a51688622ca3edaffe2b4b62d5472b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-civasavuinaum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48cd3a284fc9af45b52359d4a199709b8ed90713987a0338cf89336bbbd530bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasv-kuu-bavobu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9b95df812580bd4a2d179b9b99c05f242ae6163e2ce2dcde701d8ca2bc8a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusifog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4eeaf98dc31dfa6bb89df1bbcaba10b27c4682dfb451ecb1d4c9b4b21338b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...