EUVD-2025-111714

Malicious code in link-babel-test-upgrade npm...

EUVD-2025-121363

Malicious code in test-cassini-luna-private npm...

EUVD-2025-113117

Malicious code in graphql-apollo-europa-test npm...

EUVD-2025-113782

Malicious code in event-test-ganymede-mdx npm...

Malicious code in spectron-redis-xo-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26507e079d9a939a5ac7f3360656f3c2de560dca7b8b275b5fbca2ede529c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121358

Malicious code in test-eclipse-prompts-nova npm...

EUVD-2025-121348

Malicious code in test-sagitta-development-dorado npm...

Malicious code in io-gacrux-test-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146490badaa1b12611a8763498d0c26ee5d80e1f64f417b1d5b7cc98eeeaabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120515

Malicious code in webpack-yakutsk-tailwindcss-test npm...

Malicious code in test-umbriel-morgan-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7e38a95ac3fab8b1f25744bf8b720b6a5394219e6eba2b3e7a7456205abd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121389

Malicious code in terser-test-unuk-lyra npm...

MAL-2025-148537 Malicious code in terser-request-test-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d93cff86f78ba974b32c4a49a98e38139666c4e5f9eaa44ee82074c2c4ccec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146425 Malicious code in postcss-xanadu-test-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829bbcc100b6a0075043e2dbd7df90af59ab633374fca956c513e20a11fd2a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148118 Malicious code in spectron-jwt-test-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d702cde07f03f4885a11ae7d9d457fd5e920a336aa942f35fbd400f74af5ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147459 Malicious code in rimraf-sync-koa-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532009f657580cbf19bdbec5522f5677ade66238901cab4f4b3a95a524b4dd7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149496 Malicious code in winston-gulp-test-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6f63b35e35336a3a9fdd43cb982b8e17fbfbb1cc799341655eb1ea37467d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124407

Malicious code in node-config-leda-test-xml npm...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990803)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990803 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak in testgensynthcmd and testemptysynthevent testgensynthcmd only free buf...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990761)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990761 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix potential null-ptr-deref on traceeventfile in kprobeeventgentestexit When...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990789)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990789 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix the sk-skforwardalloc warning of skstreamkillqueues When running testsockmap...