EUVD-2025-51281

Malicious code in used-azure-krill npm...

EUVD-2025-51278

Malicious code in used-red-loon npm...

Malicious code in used-azure-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35077c5c0bd350fc65dc035a68184a2e9e116900de4a49b9b46157358aa4192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used-red-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0132acaa758676127248e3916fc9923ea692fb0983d297c4b4c2f2857088d46a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used-crimson-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13832c023176c909e82d8a1b702913d04e85d74ff41eb984c70147e081c5bfe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71368 Malicious code in used-azure-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35077c5c0bd350fc65dc035a68184a2e9e116900de4a49b9b46157358aa4192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51280

Malicious code in used-crimson-mouse npm...

MAL-2025-71369 Malicious code in used-crimson-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13832c023176c909e82d8a1b702913d04e85d74ff41eb984c70147e081c5bfe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71371 Malicious code in used-red-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0132acaa758676127248e3916fc9923ea692fb0983d297c4b4c2f2857088d46a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2026-43795

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the wave5 VPU driver. In the functions wave5 vpu open enc and wave5 vpu open dec, a VPU instance is allocated using kzalloc. If the subsequent allocation for the...

EUVD-2025-49121

Malicious code in usedgibbonz3n npm...

EUVD-2025-37966

Not used...

EUVD-2025-37968

Not used...

EUVD-2025-37965

Not used...

EUVD-2025-37967

Not used...

EUVD-2025-37970

Not used...

EUVD-2025-37963

Not used...

EUVD-2025-37964

Not used...

EUVD-2025-37969

Not used...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989024)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989024 advisory. In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2glockshrinkscan The GLFLRU flag is checked under lrulock in...