Unity Linux 20.1060a / 20.1070a Security Update: tigervnc (UTSA-2025-990941)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990941 advisory. A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can lea...

Malicious code in permanent-bronze-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085154849ecd9d851b716739801e5575c18af0883ae093750a41601c128ef731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117172

Malicious code in permanent-bronze-tiger npm...

EUVD-2025-117170

Malicious code in persistent-green-tiger npm...

EUVD-2025-117321

Malicious code in honest-salmon-tiger npm...

Malicious code in persistent-green-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6344b006626a07523e1fd1ee1a20498631a2c9826f40bf950145bf5d7685e350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138781 Malicious code in honest-salmon-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdce69503918b0ad255dbeb340a33f95b12d8418b4958f931f6f59de5fcc70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest-salmon-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdce69503918b0ad255dbeb340a33f95b12d8418b4958f931f6f59de5fcc70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135129 Malicious code in latin_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9efde1152146db4144dd7ab795f9306ae4e343338370891e732512b37651f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102122

Malicious code in sourtigerz3n npm...

EUVD-2025-102130

Malicious code in solidtigerz3n npm...

EUVD-2025-101186

Malicious code in usedtigerz3n npm...

EUVD-2025-94025

Malicious code in weeklytigerz3n npm...

EUVD-2025-96538

Malicious code in managingtigerz3n npm...

EUVD-2025-89012

Malicious code in roughtigerz3n npm...

EUVD-2025-74315

Malicious code in realtigerblue-89 npm...

EUVD-2025-74404

Malicious code in olympictigerturquoise-63 npm...

MAL-2025-112237 Malicious code in real_tiger_blue-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75dd79244402cef83abf7c7b5d3635558d6b2fb3b096d1b8d9c559c9de6dd968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76664

Malicious code in hilarioustiger-smiletea npm...

EUVD-2025-76372

Malicious code in loyaltiger-appteadev npm...