Malicious code in nokire-korean6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d758a85b4fa3fc5e3e3b99faff1f01dce05b5ca783681f6d14b80104cb741b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-148892

Malicious code in teagood-yakuna6 npm...

Malicious code in ruji-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e87a0b1c12f13fc48c90a05b8fadfdb5cc94f8c5f8d01d78e741daaa24c014a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829c9d390ad1631b0cf4a510555fbf671d3f747e761ae0b441296417f725585f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f6570a31deeb737eb876f461437818788d2cc79a134663436d0016c5e14037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db87ac483ddddc5bf2e470ae49e182e48d970f292f429f178993da330c9de5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32a61ad89e11f0cb5d5601a6297484a3c183441ac4e0c02e58bb91bd414e7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c9b2a8474e6a6bc03d67ff86101ba642436401e2fccf31fdbf5dd6886124200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ea5a411b3392cda3ddb00d8d4f3b764f895b435925719351d061b304cf2066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594bbc4fb6894f768da794e478a190cdfbdd078ac821261272e2def5cdba07e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152073 Malicious code in aji-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d37ac08e129c9b44df8a3de1b2cd340dada43158334be6c56f67f3c3b6c8d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154054 Malicious code in cinta-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19d0e342ecb592b36912a009e9f3d90ccd3fc0a1076716cac9b08d0e194bf37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-63289

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...

CVE-2025-63289

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

EUVD-2025-124948

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6xmit Use RCU in ip6xmit in order to use dstdevrcu to prevent possible UAF...

CVE-2025-40173

In the Linux kernel, the following vulnerability has been resolved: net/ip6tunnel: Prevent perpetual tunnel growth Similarly to ipv4 tunnel, ipv6 version updates dev-neededheadroom, too. While ipv4 tunnel headroom adjustment growth was limited in commit 5ae1e9922bbd "net: iptunnel: prevent...

UBUNTU-CVE-2025-40173

In the Linux kernel, the following vulnerability has been resolved: net/ip6tunnel: Prevent perpetual tunnel growth Similarly to ipv4 tunnel, ipv6 version updates dev-neededheadroom, too. While ipv4 tunnel headroom adjustment growth was limited in commit 5ae1e9922bbd "net: iptunnel: prevent...

CVE-2025-40173 net/ip6_tunnel: Prevent perpetual tunnel growth

In the Linux kernel, the following vulnerability has been resolved: net/ip6tunnel: Prevent perpetual tunnel growth Similarly to ipv4 tunnel, ipv6 version updates dev-neededheadroom, too. While ipv4 tunnel headroom adjustment growth was limited in commit 5ae1e9922bbd "net: iptunnel: prevent...

CVE-2025-40173 net/ip6_tunnel: Prevent perpetual tunnel growth

In the Linux kernel, the following vulnerability has been resolved: net/ip6tunnel: Prevent perpetual tunnel growth Similarly to ipv4 tunnel, ipv6 version updates dev-neededheadroom, too. While ipv4 tunnel headroom adjustment growth was limited in commit 5ae1e9922bbd "net: iptunnel: prevent...