304 matches found
MAL-2025-148823 Malicious code in triton-phoebe-lint-staged-postcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da62219aeb9b6a9e0c008d8ad616786c15270b713723595780d92d8f0cbd2ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144468 Malicious code in lint-staged-terser-chakra-ui-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0555aa83a6752f98aa45cf50f95aab2be0bb0f5156ba979089b0af5a64a3f030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111654
Malicious code in lint-staged-link-promise-iota npm...
MAL-2025-142396 Malicious code in express-xanadu-husky-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0e06559e846c241f796193a8640d2e67285bdd466e9b70508261a19b3cd9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144446 Malicious code in lint-staged-auth0-blitz-cors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c67138ee808692160a48ef7c74837cf18dd944b8ded69410c71f20c4277864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147603 Malicious code in sagitta-lint-staged-toml-eleventy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fca59636e0d9c48154390c3820e7c28ac94635107dd709d00f284b720b8ab5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144466 Malicious code in lint-staged-start-electron-builder-spectron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e73ecafc9499e1568b2977d0dd9f18f353acbc15330cf67c197d36a5ffec75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144461 Malicious code in lint-staged-module-redis-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89691332cc57ba458b0a199b96cbc4a71d7e11eb6e09e49948831c472f63dd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148275 Malicious code in start-lint-staged-antares-css-minimizer-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ca9dec5af3f6986b7abaf03d78477121b87d0e5875637fd40a490404dd5368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2023-59807
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2023-53169
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: x86/resctrl: Clear stagedconfig before and after it is used As a temporary storage,...
CVE-2023-53169
In the Linux kernel, the following vulnerability has been resolved: x86/resctrl: Clear stagedconfig before and after it is used As a temporary storage, stagedconfig in rdtdomain should be cleared before and after it is used. The stale value in stagedconfig could cause an MSR access error. Here is...
DEBIAN-CVE-2023-53169
In the Linux kernel, the following vulnerability has been resolved: x86/resctrl: Clear stagedconfig before and after it is used As a temporary storage, stagedconfig in rdtdomain should be cleared before and after it is used. The stale value in stagedconfig could cause an MSR access error. Here is...
UBUNTU-CVE-2023-53169
In the Linux kernel, the following vulnerability has been resolved: x86/resctrl: Clear stagedconfig before and after it is used As a temporary storage, stagedconfig in rdtdomain should be cleared before and after it is used. The stale value in stagedconfig could cause an MSR access error. Here is...
CVE-2023-53169 x86/resctrl: Clear staged_config[] before and after it is used
In the Linux kernel, the following vulnerability has been resolved: x86/resctrl: Clear stagedconfig before and after it is used As a temporary storage, stagedconfig in rdtdomain should be cleared before and after it is used. The stale value in stagedconfig could cause an MSR access error. Here is...
CVE-2023-53169
CVE-2023-53169 concerns the Linux kernel resctrl path (x86/resctrl) where the rdt_domain’s staged_config[] was not cleared before/after use, allowing stale values to cause an MSR access error (WRMSR to 0xca0) when creating resource groups under CDP. The report describes resctrl_arch_update_domain...
PT-2025-37533
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to resource control resctrl where the staged config array in rdt domain is not properly cleared before and after use. This can lead to stale...
Malicious code in scripts-lint-staged-cygnus-mongoose (npm)
The package scripts-lint-staged-cygnus-mongoose was found to contain malicious code...