3018 matches found
MAL-2025-148602 Malicious code in testcafe-rollup-plugin-corvus-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12fddcde5015e0fe42d0e3748a46c260942439e93f59eb180f802176af209eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147506 Malicious code in rollup-package-duplex-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821c407ff719dc4afe450356edd924866833272548005ebb50e5b1f4254670c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147504 Malicious code in rollup-nightmare-nodejs-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013d8c46a1af7deb1ec86ef06930fca85b4c0bc9fa04823847913c05b0e6d62f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148063 Malicious code in socketio-rollup-plugin-vuetify-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25cfe748bbdae6caba66a493bc7b808107e36ada1c4f2a6279623281fcff361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147496 Malicious code in rollup-ganymede-impulse-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4e423e4a8baa3cfbbd0fa2de90cc13372b6f2fee6ef4a79521af5809045b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147518 Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-process-convict (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982c0a26cbd0841c61c8ff2c52e83daa73d1549af5ddfa81fcb4aa835fdf2b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146745 Malicious code in proxima-terser-webpack-plugin-materialize-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748d8b8f64af29685a4cf4a2b52fcbb9c4ab81bedee9b428c9ebbc145e83538d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149560 Malicious code in wolf-pyxis-rollup-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825b2089e674a1b4f07d988dd4dd46073f675eb1896bfdf21ad1489f1458389c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144989 Malicious code in mini-css-extract-plugin-process-taurus-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b234992fbe92bbd6d5b222143d1472c4d031552a7aa0877692f9837bb424228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143497 Malicious code in hyperion-rollup-plugin-loop-testcafe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fc72224b44f83c3a8f5dda2c26aa1b2e517794db68c1a486d37563bf0056bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144755 Malicious code in materialize-sequelize-antd-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19828eab2f701ae359759a95b517b23ff2544256a38e814ddde9e68560f5c8bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147513 Malicious code in rollup-plugin-eridanus-blitz-jsonp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfa992f1714e127498f63f69dcf5e804c95c42071e1eaacffada5f691bb554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143509 Malicious code in ignite-ceres-element-ui-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979a077177e77d8dd179974db351f01ac49b8fccde97b9a54405b9175dd8ac2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140119 Malicious code in bootstrap-rollup-figures-auriga (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc950508599104478cefa863ecb90a39d15f9b7095bafe4d9c802576eb00031f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122406
Malicious code in rollup-plugin-fomalhaut-pegasus-hyperion npm...
EUVD-2025-121949
Malicious code in sirius-rollup-despina-meissa npm...
EUVD-2022-55652
In the Linux kernel, the following vulnerability has been resolved: serial: pch: Fix PCI device refcount leak in pchrequestdma As comment of pcigetslot says, it returns a pcidevice with its refcount increased. The caller must decrement the reference count by calling pcidevput. Since 'dmadev' is...
October 14, 2025—KB5066872 (Monthly Rollup)
None None...