EUVD-2025-88198

Malicious code in universalchinchillaz3n npm...

kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix NULL pointer dereference on certain command aborts If a command is queued to the final usable TRB of a ring segment, the enqueue pointer is advanced to the subsequent link TRB and no further. If the command is late...

kernel: usb: typec: ucsi: displayport: Fix NULL pointer access

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix NULL pointer access This patch ensures that the UCSI driver waits for all pending tasks in the ucsidisplayportwork workqueue to finish executing before proceeding with the partner removal...

kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix NULL pointer dereference on certain command aborts If a command is queued to the final usable TRB of a ring segment, the enqueue pointer is advanced to the subsequent link TRB and no further. If the command is late...

kernel: usb: typec: ucsi: displayport: Fix NULL pointer access

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix NULL pointer access This patch ensures that the UCSI driver waits for all pending tasks in the ucsidisplayportwork workqueue to finish executing before proceeding with the partner removal...

EUVD-2025-74124

Malicious code in universalplanarianapricot-85 npm...

EUVD-2025-74125

Malicious code in universalgooseolive-89 npm...

EUVD-2025-75345

Malicious code in universalraccoon-gooddev npm...

EUVD-2025-83813

Malicious code in universalelephantz3n npm...

EUVD-2025-73134

Malicious code in universalotterz3n npm...

Malicious code in universal_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1030513190f779cdc56f77b105a851e606b9c3798d25a00fac1eb1def6731561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97154 Malicious code in universal_hornet_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9147e996926f42d54cf863434d37d0f01705d850fa51a7175a1b47a323f5b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73137

Malicious code in universalalbatrossz3n npm...

Malicious code in universal_hornet_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9147e996926f42d54cf863434d37d0f01705d850fa51a7175a1b47a323f5b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73136

Malicious code in universalhornetrequirement npm...

Malicious code in universal_moth_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0279e38d43b41193c8d4e515d7f4ae50828e69fd137bf1d54fc3481f92d5c745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31d6f1942156b19e2690861533f499f7a2b84efd5852aef077da91a42b60a6b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97153 Malicious code in universal_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1030513190f779cdc56f77b105a851e606b9c3798d25a00fac1eb1def6731561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65722

Malicious code in universalbarnaclez3n npm...

MAL-2025-91532 Malicious code in universal_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2cc5e48c99528d151c60ba57e1fd2c217c288fc38ce6a7f716dcbd00b704b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...