EUVD-2025-176189

Malicious code in stream-polaris-json-ursa npm...

EUVD-2025-178254

Malicious code in json-stream-aquarius-cygnus npm...

EUVD-2025-177590

Malicious code in nightwatch-procyon-stream-docusaurus npm...

EUVD-2025-178391

Malicious code in inquirer-stream-metabolomics-uninstall npm...

EUVD-2025-177444

Malicious code in ophiuchus-corvus-stream-deimos npm...

EUVD-2025-176186

Malicious code in stream-yildun-bootes-neutrino npm...

EUVD-2025-176188

Malicious code in stream-redis-bellatrix-oscillation npm...

Malicious code in stream-janus-soap-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd0748be6aaa678054ffec1227c9412d1378a7a4ce501ac61fd6eab94006e013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176192

Malicious code in stream-ichnology-plutology-hermes npm...

Malicious code in stream-sequelize-writable-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fdf4cd8fedeb6040c6b2bae5b893aedc5f019fba5512dc35e0ebc2a03cc4b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176187

Malicious code in stream-sequelize-writable-local npm...

EUVD-2025-179751

Malicious code in charon-stream-fornax-dotenv npm...

MAL-2025-186131 Malicious code in charon-stream-fornax-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4cf23b8f66359c49b529a6491ed2854491a148dd0446c95f06774ae3374ec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189686 Malicious code in stream-polaris-json-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b30bf02b8ab08397ef907793ad4f30bed9073496e1c9a9008a9455e4d891f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-procyon-stream-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e497e4e46a9d7a57d90c0c65f94d4cbb5d2a38b38ddbc06eec016cc45c40b6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176094

Malicious code in supervisor-helios-stream-rate-limiter npm...

Malicious code in capella-cypress-stream-supernova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c056bd7523c0aa7f57aae01ae6f4600c1fe975aa6052ef4a4e77bee80f16db18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177797

Malicious code in miranda-stream-resolvers-convict npm...

EUVD-2025-176194

Malicious code in stream-andromeda-proxima-loglevel npm...

EUVD-2025-150370

In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...