[SECURITY] [DSA 6059-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6059-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 16, 2025 https://www.debian.org/security/faq -...

Google Chrome Security Update (stable-channel-update-for-desktop_11-2025-11) - MAC OS X

Google Chrome is prone to a heap corruption vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

DEBIAN-CVE-2025-40201

In the Linux kernel, the following vulnerability has been resolved: kernel/sys.c: fix the racy usage of tasklocktsk-groupleader in sysprlimit64 paths The usage of tasklocktsk-groupleader in sysprlimit64-doprlimit path is very broken. sysprlimit64 does gettaskstructtsk but this only protects...

EUVD-2025-102088

Malicious code in stablebadgerz3n npm...

EUVD-2025-102086

Malicious code in stablepigeonz3n npm...

Malicious code in stable_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73330b901f9f071b56af1c93cf538fd1fe8b6edc5476db0781648efe8e76e7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102087

Malicious code in stablecanidaez3n npm...

MAL-2025-130318 Malicious code in stable_canidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67cf622e7807f93842baaa1e59881ae6aeddeaa3464a441803a7bd7e23d5affa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-88675

Malicious code in stablehippopotamusz3n npm...

EUVD-2025-74201

Malicious code in stableflamingomagenta-21 npm...

Malicious code in stable_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338cae6fc1150d3977804ce22de50fa32ea2b1008ebf89021a6bf2e300ad2f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78233

Malicious code in stabletyrannosaurusz3n npm...

EUVD-2025-80465

Malicious code in stablemackerel0xrequest npm...

EUVD-2025-84176

Malicious code in stableladybugz3n npm...

EUVD-2025-73548

Malicious code in stablemousez3n npm...

MAL-2025-96742 Malicious code in stable_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4861ff90a393434ce7a232a257153aae55cea94e24f304da20a790f41ba79629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e01bafbd4dc7cf1b070e1ea1d53641fe32bd9fb828a3ed5aae4d874ecc6f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-66514

Malicious code in stableroadrunnerz3n npm...

Malicious code in stable-blush-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bbfae98498da3b1b9b06e980f7334881de10d0d2a21a1ddd12f35bbc527650a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable-lavender-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe3dbebdf19034ccb5e6d9f079b34e209948046f6434e541e5e58b5b236c4fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...