SUSE-SU-2025:4092-1 Security update for elfutils

This update for elfutils fixes the following issues: - Fixing build/testsuite for more recent glibc and kernels. - Fixing denial of service and general buffer overflow errors bsc1237236, bsc1237240, bsc1237241, bsc1237242: - CVE-2025-1376: Fixed denial of service in function elfstrptr in the...

MAL-2025-179890 Malicious code in lookingan-jeje2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8c132cde42647f289c34bcb8fed8cab1f1befce1696dd4e6a80e6c197b3ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176233 Malicious code in munufafai-sufanufi-cagafifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a6efc05e22804f2e32d445e1202866c8d0c2fa6138055acd4c8d082acc99f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e056ef0dcd8c4ed54870eea248d0e0027d34d3f28892344edbfc8cb308d24575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146291 Malicious code in pm2-algol-flare-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d16774e2cee4ea961f6c348bf4e92a499bdf16408452f147c123b2cd2506eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148354 Malicious code in subscription-delphinus-grunt-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7dd9799d731cbf6da4d1a81e6520f57583f73291843b357414d2a63c31c3fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134576 Malicious code in jaja-taiwan70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790986c39d63564304fbc91bd635febc63e462445ca243962db671a7894d167d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e01a43418137171089e026254d3eba8b9626886f5539af8caf726c78c19597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-buburayam11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6267ecdac4e952c2f570cbbfede3ccc9f66351abdd6616c133e3ac8e911a1e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-mangga31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6504688725d519a6ea30603d7d28a6ee021fc4315d0a3059451842e5c1194730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-nasiuduk34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1748eb2310341e975aacce3341a51ef9288b8fb9bc3cc2482f3999d961822fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-rujak26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea781ab97ef14d1e5ba5f74a4e3b13ccb881dc5ee219fd15f3ed0ecf6ce271c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125492 Malicious code in citra-mangga63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28ff5c1d254741bb8d80068a33c76f582fbfd208b19753f56b77b032fded5d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba3d8ac5a8423fc112a355741b55d0057db6e4d93a165010209e1296fef5abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120046 Malicious code in filthy_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965f8bb999bac2653a213d61ab9a345e447fcd85506182490df923a7c4530bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118865 Malicious code in bayu-gepuk44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade9078b4e2ad6fb59e16f0bcee735800251911ad5dc17ef3a11c321b8bec64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_snail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab30b459d514e0b163757b2cab6d4848cdb42346ee5db3402da05f520049f25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101581 Malicious code in diplomatic_skink_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9aed083696157fe756de976295b47618a9b4d02a136f0729b186d37b888e9b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110903 Malicious code in wide_egret_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb1a47a8d7723cff400f04eeb9a178f988809f025273695a490cf6011ff904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106579 Malicious code in ogi-mangga89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c821217f4697f7547f5f0560bc7cd0f208da33ffac109b7f466428194f809d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...