MAL-2025-189734 Malicious code in sun-kernel-nu-tree-simulate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f141bd5fca02000c7a777fd6e35b11424efcb7585261ffaf7bc4962dacb06186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180202

Malicious code in authorize-sigma-stub-sun-mock npm...

EUVD-2025-179347

Malicious code in delta-sun-psi-new-byte npm...

EUVD-2025-180009

Malicious code in book-good-old-sun-test npm...

EUVD-2025-176474

Malicious code in sed-promise-book-sun-lambda npm...

EUVD-2025-180003

Malicious code in boolean-reject-balance-sun-slow npm...

EUVD-2025-176082

Malicious code in table-old-sun-await-decode npm...

EUVD-2025-179384

Malicious code in debug-user-pipe-sun-simple npm...

EUVD-2025-176243

Malicious code in spy-sun-byte-debug-import npm...

EUVD-2025-179089

Malicious code in epsilon-web-sun-test-easy npm...

EUVD-2025-180485

Malicious code in air-query-sun-void-debug npm...

Malicious code in sun-serialize-parse-validate-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13920f3f0ca3140df6e86d32d1c7763b6f4bdfb166b23361ada1f3d12873e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176144

Malicious code in sun-bad-assert-secure-protected npm...

EUVD-2025-176139

Malicious code in sun-thread-monitor-void-sun npm...

EUVD-2025-180454

Malicious code in alpha-sun-validate-transpile-bad npm...

EUVD-2025-176693

Malicious code in report-new-runtime-sun-user npm...

EUVD-2025-176143

Malicious code in sun-cold-upsilon-deploy-hash npm...

EUVD-2025-124954

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

CVE-2025-40129

CVE-2025-40129 is a Linux kernel vulnerability addressed in Unity Linux/UTSA-2026-013110: sunrpc may dereference checksum.data due to a zero-length checksum in xdr_stream_decode_opaque_auth(), causing a null pointer dereference when gss_krb5_verify_mic_v2() accesses checksum.data. The patch ensur...

CVE-2025-40129

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...