MAL-2025-145901 Malicious code in orbit-bellatrix-titan-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a567f1ed8455c1488e6bc4ec30bfc6f16a9ce9fad068780f75d21a0924f3c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138677 Malicious code in eastern-amaranth-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d915a045bf2eb60d8439b9e870b610aec56232db06f90092cf835d0c3362757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-saguer54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26b3eea24dd26793681dd4955cf76b2976b6f3cb9bb8b22aa158ceee83d3b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-mieayam73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53db0dd16fd498cf2944196d2d53bee7ead5d445df2f0a1b8d212104c3494e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in several Office products. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges, execute arbitrary code in the victim's context and gain access to sensitive data. Successful exploitation requires the malicious party to tric...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service - Execution of arbitrary code root/admin privileges - Accessing sensitive data - Obtaining elevated...

MAL-2025-113992 Malicious code in fit_booby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c080c35a64e804bab439b8fa494454ae0fbfda338dcd8f908207774b3edf3d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weird_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65d903462669b61a21a7df90e027cc3f9a96185ced672a8c8039e145b50d8aa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83043 Malicious code in agus-kue36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b671b7099072c074d248d1d5db7a69c6a310cf7fd3679d9cd3722019543e9b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76606 Malicious code in zaki-tongseng69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e406fe0a77917deac8829511438d86c26c3c7ea1617e9a49b1737fc9b4ccfb56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-tempe10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13849d616e73f6582818d9e1d3eabd9a5bbb9280d00375628aa52ecfb11ae5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61363 Malicious code in steep_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d173f5b238b8f2ba94de217745a32ec2d76138364f4d72e82876d2f8ef0d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-takokak8-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcc4fb8646b0c016cc1302c60b71bd6a99a86c30ad062653680ee2e99dda11f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

OESA-2025-2618 python-aiomysql security update

aiomysql is a "driver" for accessing a MySQL database from the asyncio PEP-3156/tulip framework. It depends on and reuses most parts of PyMySQL . aiomysql tries to be like awesome aiopg library and preserve same api, look and feel. Security Fixes: aiomysql is a library for accessing a MySQL...

OESA-2025-2619 python-aiomysql security update

aiomysql is a "driver" for accessing a MySQL database from the asyncio PEP-3156/tulip framework. It depends on and reuses most parts of PyMySQL . aiomysql tries to be like awesome aiopg library and preserve same api, look and feel. Security Fixes: aiomysql is a library for accessing a MySQL...

OESA-2025-2617 python-aiomysql security update

aiomysql is a "driver" for accessing a MySQL database from the asyncio PEP-3156/tulip framework. It depends on and reuses most parts of PyMySQL . aiomysql tries to be like awesome aiopg library and preserve same api, look and feel. Security Fixes: aiomysql is a library for accessing a MySQL...

CVE-2025-20725

In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20726

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20726

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20727

In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...