CVE-2025-40200

In the Linux kernel, the following vulnerability has been resolved: Squashfs: reject negative file sizes in squashfsreadinode Syskaller reports a "WARNING in ovlcopyupfile" in overlayfs. This warning is ultimately caused because the underlying Squashfs file system returns a file with a negative...

Malicious code in baso61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7566b3aadc552a2e2f7b2c3608662f5571c2d20dcfdc0456e147de2f9091a5e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141581

Malicious code in hitachi-poke60 npm...

MAL-2025-165047 Malicious code in rival-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da03511e217c945a1d6b37423ed89efbe84e99d400f8bcbdc64854d246dec5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54f1cd29a1bffa6e4e9c8a0396b4d552d6f69f39df177d85b130086d196392c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b455b2bc36a1a2b6c76aeeb44c064d74971cef3550f5133f0154850859dedb6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f74ea61f3200837c8f730538c7d40225984701cb8e0561f44e48e4dfe2b30e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f45f2401b3d0887f2a7976a5448e7583d6668ad6185572a3979890c9e5f07e4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c44d176407d4da9e7089ffc57beac03e520f4b3605991078ccec31250d5b2ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972d7a6c0351c2383e0a6b64bcf1428f41cf5e45263c83c69e8ca546921420ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70e7d0d48ef84b27938da40ed12fe90ec4422ce45944b392ee6cbda16971198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98bddafb19ca1cc7607446f151f78f0dcbbbdb3381e57bc36ba9358597e67def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9668f9a0fc72187fe120ca6038683f38b7f07978384d83c9c1c08b755cf422c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3945657e89ca95c120ba8e920451e88b23eea7e64a203d73c26a1e2fac9e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155157 Malicious code in fitra-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7524bd7ec2804a29f31ce610def80232e46742adf2900397a9199d62844de90d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Microsoft Fixes 63 Security Flaws, Including a Windows Kernel Zero-Day Under Active Attack

Microsoft on Tuesday released patches for 63 new security vulnerabilities identified in its software, including one that has come under active exploitation in the wild. Of the 63 flaws, four are rated Critical and 59 are rated Important in severity. Twenty-nine of these vulnerabilities are relate...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990870)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990870 advisory. In the Linux kernel, the following vulnerability has been resolved: ecryptfs: Fix buffer size for tag 66 packet The 'TAG 66 Packet Format' description is missing the...

Patch Tuesday - November 2025

Microsoft is publishing 66 new vulnerabilities today, which is far fewer than we’ve come to expect in recent months. There’s a lone exploited-in-the-wild zero-day vulnerability, which Microsoft assesses as critical severity, although there’s apparently no public disclosure yet. Three critical...

Malicious code in joko-rangginang60-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c814885a97892a0e56e7465b1a59ed92664f46809f3dc12887f7ced4309bbaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Microsoft Patch Tuesday for November 2025 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for November 2025, which includes 63 vulnerabilities affecting a range of products, including 5 that Microsoft marked as "critical." Current intelligence shows that one of the important vulnerabilities, CVE-2025-62215, has already been detected i...