Malicious code in lina-kolak68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812e3d48c9d65a0400dce3eb3670352b92ea57ee3021c499797ce4310c54581f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-asinan56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583bffbc4d1c9784779cd9bc33db2aec1762acec9fdb220e6b3213aa9d3e3b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65635 Malicious code in tomi-lutis19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d73e52cd9a8f07d37e450b1fcfa637fb0e80c6fcd83dae47a0a0e0db8b2cd8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c4a39bcf89f686e873a52d9ee9886fbb79578d519d059ca0e0627484f0f372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suitable_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d07f341c4967fa2585d1eca7a9694f98b85891c04949827c5c6e0fa7d0118eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lontong24-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2428447445ac1b51642eca62df9bc195d367eb5cd9b5beca9244ba13a47eee13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-mie70-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699c22926a6c35a2634e0244da74b760934e28af1d305318c7e00d951c796617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57496 Malicious code in mahesa-rangi88-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ba2052ea53a11321ec405199250f6f47f931f813aa0a11136c5c0cef67d84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54679 Malicious code in rina-getuk21-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5f03b63c9f27b366e65ad5a44374e1f39725954a1b1443bfbc840a93caa808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54600 Malicious code in rifqi-bubursumsum61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 193bc42acc3552a4fc0af4dc6e05dc5cc2563b68d4484b6705dfdfbcfafa273e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-kripik19-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c175f49e4569403b0845d5398c596a4385d328ddf6aad5b44fa2e2c9d624d1d5 The package candra-kripik19-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in wati-lapis61-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6093b1c525640af4cbbdb90fafa5cd097a62f0aeb4448ef41fdeda6d0742c99 The package wati-lapis61-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

CVE-2025-43439

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, visionOS 26.1. An app may be able to fingerprint the user...

CVE-2025-43397

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to cause a denial-of-service...

CVE-2025-43389

A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, visionOS 26.1. An app may be able to access sensitive user data...

CVE-2025-43502

A privacy issue was addressed by removing sensitive data. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. An app may be able to bypass certain Privacy preferences...

WordPress plugin IDonate 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414669)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414669 advisory. A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose handler could happen if removing device that is not common to remove video...

EUVD-2022-55410

Malicious code in bioql PyPI...

DEBIAN-CVE-2023-53375

In the Linux kernel, the following vulnerability has been resolved: tracing: Free error logs of tracing instances When a tracing instance is removed, the error messages that hold errors that occurred in the instance needs to be freed. The following reports a memory leak: cd /sys/kernel/tracing...