Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990751)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990751 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Set lower bound of start tick time Currently ALSA timer doesn't have the lower limit...

EUVD-2025-99287

Malicious code in emptytickz3n npm...

Malicious code in gradual_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a96ba6f9d02e5dca662172fee066519d528b8fb242ca7d8acc63480885bd4e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-95254

Malicious code in roundtickz3n npm...

EUVD-2025-106016

Malicious code in concretetickz3n npm...

MAL-2025-112325 Malicious code in socialist_tick_yellow-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1cfe0cba432a144cd73f2a359521e46a3136dc4a5b4815ee44f2c14ae8150c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public_tick-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd3dd1ef47e6296558a879df676e7b0d12720ecfd41d4a09d2451a53aa749ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76479

Malicious code in justtick-appteadev npm...

EUVD-2025-79495

Malicious code in crowdedtickz3n npm...

EUVD-2025-78350

Malicious code in selfishtickz3n npm...

MAL-2025-108524 Malicious code in selfish_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9b195f5dba6a5bb112fb70e3cf028fa6f7513a4f25e3ad85354648cca25d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-62765

Malicious code in organisationaltickz3n npm...

EUVD-2025-62946

Malicious code in neartickrequirement npm...

EUVD-2025-63587

Malicious code in improvedtickrequirement npm...

EUVD-2025-86768

Malicious code in circulartickz3n npm...

EUVD-2025-86952

Malicious code in boldtickz3n npm...

Malicious code in youngest_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704cc6a439f941a09e86050281ebbcc2eea49631e23051c0a4f842132d476b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80931 Malicious code in regional_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33149dee6ccf927d9a440668fbc60ed350875541a430b73cd39a09e55cfcd8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52956

Malicious code in occupational-violet-tick npm...

EUVD-2025-51501

Malicious code in tired-jade-tick npm...