MAL-2025-170324 Malicious code in verify-aya-amil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4dd738127b97d6ba6d876359f7ba5439193f3db8b453eb2406abac5bc6d85a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170500 Malicious code in verify-tayic-iamsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c92b9108c497e02e1db314b800b4f4800aa17da9fda97a7014eaa282a2fd6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170513 Malicious code in verify-tical-bisuya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a16e7528c3839332dac45e8816a91ae061ed1519be4aafa345b76bd02426e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146558

Malicious code in verify-ai-aisai npm...

MAL-2025-170459 Malicious code in verify-tactiva-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74ab8e10a5ecebc361c0bcfcd6149f51a22bc302c8b280e695953b29f69da19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170482 Malicious code in verify-taic-malasikibakulu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b1ae88a691fd11cf0cee9bc2f9bc44388825f50a0b9a1093a25873613591ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170278 Malicious code in verify-aikun-miaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 513bb331ba0080382adc020eb8dcc9daa186c649f15d4f810f7ac695ab524a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170309 Malicious code in verify-ain-ukasiam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f33e22f6c4d4c956a3d4d249a98754cb17d3072c500445f0cf6ea4bf248ffdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170480 Malicious code in verify-taic-malalu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ee0d8373449e9ce56b83992521a36973f8b984062ac661bc2f04dd41be48e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170285 Malicious code in verify-aikun-misualaibaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 993f08d7d4d467932304e80abf2fc70cd4ccddbaab17dc28c51ed4d99a0825e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170391 Malicious code in verify-ayica-amalauni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0275959b17b075db883472d39e700f614dccf857a3d11bad8e3edd23e86e9d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170270 Malicious code in verify-aikn-ukasiamisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a152e718e71c625b11f614e321ab16f25838e411ecfa4ee5cd7b661c81fa84fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170485 Malicious code in verify-taic-malasulu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c6b22ff36f6ea2593487cfdb55a0596c5632ca888f9959e883f04381c3bec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170262 Malicious code in verify-aikn-misaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98c87f794f4836971b0c80fc232b0e7078d569dffb277d18f1895bc02ca6fa23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170316 Malicious code in verify-ain-us (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744ca877baa45f737af0da700786e4c08b94bcce8b2e82790e2571fcf56b805c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170332 Malicious code in verify-aya-amilui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48aa539b790d2135fefceccedb4d4497fe998ac9494e35190a6dd65fc408f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170269 Malicious code in verify-aikn-smisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 333e1759399d850232031406b7285c368c17619ef339ebb2064848f782518b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170314 Malicious code in verify-ain-ukasim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889c4cf2e919ec379c40040c48bd793ad322771e727906838e75fce4efdf2f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124954

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

CVE-2025-40129

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...