MAL-2025-88850 Malicious code in nina-serimuka58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ed6af41382ce85a6a6e0ade3df09c48c66745c1ed5cb5b450e21f443a0fedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-getas5-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07023aa1b5bf40bfb60f4cf9324dce21663387e1d86037d0129336b0fe501b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78008 Malicious code in exceptional_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0870dcfca9b10ad8650e932cb74e1282ee7b4021beb380a5512686d86ef48634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78396 Malicious code in gilang-gorengan40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e529d86ca76b402e8aceaf576267df217d983751281a4a3af61734bb0657de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-gudeg29-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df4b7c892b033b8b72051e5aae7237cf287fcd93c61e83f8ad89cfee92559d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75962 Malicious code in vera-keripik11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da73058ab7ac39e959b205f0abda24763ce520ade7df257f2077728cf394cc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69097 Malicious code in legislative-brown-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66cdbada940e656239d1cd140eb1918b98e6eaa5aafb0a81edacf7e90cb7b0bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71524 Malicious code in weary-coral-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d549ad13e181b5c9e4be49b56e282f6223e26ec200e8fc704681876d614dff6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical-red-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3d7405795dc54a69eab4fe2508cd7b65b613180af0cee665c3d8c64658e4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60612 Malicious code in holy_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4744bdc55e19d664a35d0d34c8d8efd72aab6bbaf3ef18799cab127db7abafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_ermine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c3b89cda8607982f093ec15166a03b212286de59599293445d3811f8b8b7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-lapis82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f525b9981207af1069c6ca6c84a6f0eb4a42a97e56d5e283faea2442dfa834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-mendut46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d90bb58136a1f573c6302d64289f9de858bbddebc9d6552cb5fa1a6f822e339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50141 Malicious code in citra-kupang33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222acc614cb9675e41602eba1c7c6f37b743641f47413b13d5b7bbe5eb4d743b The package citra-kupang33-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988837)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988837 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: renamewhiteout: Fix double free for whiteoutui-data 'whiteoutui-data' will be freed twice ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989766)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989766 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix deadlock in concurrent rename whiteout and inode writeback Following hung tasks:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989799)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989799 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check for inline inode Yanming reported a kernel bug in Bugzilla kernel 1,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988930)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988930 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4renamedirprepare We got issue as follows: EXT4-fs loop0: mounted...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988712)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988712 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check for inline inode Yanming reported a kernel bug in Bugzilla kernel 1,...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: The cancle function marks a bad inode after attempting to remove a file name. The reproducer uses a file0 on an ntfs3 file system with a corrupted ilink. When renaming a file, the inode of file0 is marked as a bad inode...