CVE-2026-46302

CVE-2026-46302 affects the Linux kernel, where the /sys/fs/selinux/policy file could be opened multiple times, allowing a process to block others from reading the policy. The patch eliminates the policy_opened flag and tightens the policy mutex critical section, removing some extraneous checks. T...

MAL-2025-179596 Malicious code in analuba-innu-nini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48255bb5fdc5117927fcb6c623f27c9820d718d0de4e96071920b56f6f032373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152855 Malicious code in aril-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0665b947178a47207f95936fa3855e5d54a5b7a337579ea2b7b13640e193e4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-tailwindcss-pegasus-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c42e3fd037db8f4b91d3aaefec30fd2fbad79523ac2b95a4aaef0bf75c2eb56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147699 Malicious code in schema-tethys-vortex-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e13c39b9392925f5d6ad9cf3dbc8489c406773998529d48a03bb729ae664295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-quasar-webdriverio-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c09e54ebc6eec10368771375dbb392a2cd112cb37bbd784a862a602dc472d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148574 Malicious code in test-meissa-node-config-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622677d0278a9dbe3a8d54b8bbb8f19b1d321ed58e50002428cffafe7176db8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131100 Malicious code in vina-nasisayur38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c659c50d8830fe3afcef537d07e7b61aa4ab1e20abb9fbe2eb4e2f06941d5b8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-telurtahu83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360cb1378056c71304087f9e125c9fe4324b44745a1c0d845f408000a38aa2a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c0b6b51a01e3769315d68a9448faba73615bf718c6f536c02d80061a3e9015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-getuk34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3e83047e3f05dbe1c1d27c8ad211fc4f60fe489ebe10bb9c45fc45750f163b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_chicken_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62f30587ae785e32bad4c7e173d8ce2b569766931ae76cdffcb4ba2661b75e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03c64287c4545c406e67013f35aa59a7579ab6d15435325f4ff1513bb2f37d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98308 Malicious code in rifqi-taiwan89-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36c25940594d6e21fe8aba8e8b7b318f093179a89800feb09f5a9128b290965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sore_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b361846a7b96319e5512131e37bcad8554b8e24329359ede5bd2cd8e7f242a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85889 Malicious code in gilang-ruwet51-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf6882e05a942038a63052216a9c146218dddd993c6b1647b69a849c73e17af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98483ce43073bc9aa8bc5fafd6df6f05da2e16ebe1c7aeff556108acb09e995b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ec05211c484f56a040df76ef0f276060c9c5c55df40f86d835293cd7da928b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82058 Malicious code in vera-nasisayur27-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b43a8f5bcd2f628e1dc736a62d34e97cfe4ea633748ca9c57c02eadf3991b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73097 Malicious code in gilang-moci9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d6b6ffd26cf39d1152441857927528373fadba97a5b80a2bde549892d6e512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...