Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10

In the Linux kernel, the following vulnerability has been resolved: media: radio-shark: Added endpoint checks The syzbot fuzzer was able to trigger a WARNING message from the radio-shark2 driver: ------------ Cut here ------------ usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 0 PID: 327...

CVE-2026-7378 Heap-based Buffer Overflow in Wireshark

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013315 advisory. In the Linux kernel, the following vulnerability has been resolved: media: radio-shark: Add endpoint checks The syzbot fuzzer was able to provoke a WARNING from the...

EUVD-2025-117491

Malicious code in clean-brown-shark npm...

EUVD-2025-117174

Malicious code in partial-violet-shark npm...

Malicious code in essential_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386390d5513fb827f59c669c718ed3172a88a87402ed0986115090f995a2771d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101896

Malicious code in technicalsharkz3n npm...

EUVD-2025-96431

Malicious code in modestsharkz3n npm...

EUVD-2025-105991

Malicious code in convincedsharkz3n npm...

EUVD-2025-104469

Malicious code in intimatesharkz3n npm...

MAL-2025-116405 Malicious code in planned_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da541eba992d22ef2021a1032db2ccce6cfb05ac78bc8fa458f8b22dbb9ad51a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky_shark-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1b11904fff151f41159a8261d281ae9e426d7cb1dbbf5eacd56f4f6bcec908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77184

Malicious code in culturalshark-appteadev npm...

Malicious code in united_shark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04877d0d4a9d17642aaa72e6725d85a9d5811a6995139d5d9f67c803c5592ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76888

Malicious code in extraordinarysharkreplicateautomation npm...

EUVD-2025-75347

Malicious code in unitedshark-silentdev npm...

MAL-2025-103869 Malicious code in husky_shark-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1b11904fff151f41159a8261d281ae9e426d7cb1dbbf5eacd56f4f6bcec908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102442 Malicious code in extraordinary_shark_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5b0bce6174edf07be05cb6c03e0200d469ac30d6d32c9b9ee0c15934e3ce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101142 Malicious code in cultural_shark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979a4466f2a3cd608e3ec6ba5c417d801b97aa13463cf64b5efa9c1d35ce515e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81230

Malicious code in middleshark0xrequest npm...