EUVD-2025-51775

Malicious code in strategic-rose-lark npm...

Malicious code in free-rose-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b272696f94e863e2b56b85ac9a06d05c0a77a205cbd1f8e08f5a00462ed3cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51122

Malicious code in weary-rose-marmot npm...

EUVD-2025-55993

Malicious code in adjacent-rose-smelt npm...

Malicious code in partial-rose-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ea2ed40996b8e41be803e7d2db7aa7183e5bb028d0e1b16d1ecf384f14eefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55421

Malicious code in clinical-rose-canidae npm...

EUVD-2025-54884

Malicious code in direct-rose-primate npm...

EUVD-2025-52827

Malicious code in partial-rose-eel npm...

EUVD-2025-54961

Malicious code in definite-rose-felidae npm...

MAL-2025-70196 Malicious code in raspy-rose-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4d4c77a8c91f0d229d4fba71f457026993679a350298256f2c5255a37936c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68420 Malicious code in free-rose-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b272696f94e863e2b56b85ac9a06d05c0a77a205cbd1f8e08f5a00462ed3cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67597 Malicious code in curved-rose-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4733f035a76f3a72778f0c4e738aff55017ba75200e0fd98d684ab72d0fb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67884 Malicious code in dry-rose-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a486998b80948e010817fdc7e3c5ad31fb7acfe6695ec6ed3eb6a13b896d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71134 Malicious code in thundering-rose-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672edcdbddf06ab83a7e9062bcb82a3db41c791e96b68e60f3ee399e1f14d04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71221 Malicious code in unable-rose-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7298374d8544f5faf21010e36db809189e2306a9b9330b323ee85be402c78776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71271 Malicious code in uneven-rose-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f28ee7879619b034ebb4cfbd6a10d8a81a66f5fa7e89dcbae3966c2f27d8c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71527 Malicious code in weary-rose-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d7f5b2d252e761d8a7024e3e143a1cf0e7e7fd8e576b63f2beaab276882956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71780 Malicious code in zesty-rose-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb3413ebe94bb5df870e24d8eb4e8ad1bff8d5ab21c92aeb9b2f60fb147c087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988696)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988696 advisory. In the Linux kernel, the following vulnerability has been resolved: rose: Fix NULL pointer dereference in rosesendframe The syzkaller reported an issue: KASAN:...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990138)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990138 advisory. In the Linux kernel, the following vulnerability has been resolved: rose: Fix NULL pointer dereference in rosesendframe The syzkaller reported an issue: KASAN:...