CVE-2026-9638 Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts

Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011159)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011159 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: fqpie: avoid stalls in fqpietimer When setting a high number of flows limit being 6553...

EUVD-2025-120005

Malicious code in yielding-tan-aardwolf npm...

MAL-2025-149805 Malicious code in yielding-tan-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81d91f8cbcfe0e34c99b9a613a6289e5103bd333897d8363daed71db98de07b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116973

Malicious code in yielding-white-vicuna npm...

EUVD-2025-75150

Malicious code in yieldingiguana-silentdev npm...

EUVD-2025-77864

Malicious code in yieldingrodentz3n npm...

MAL-2025-111303 Malicious code in yielding_smelt_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d16a6f352660e01dbd136bb89ff0e4efc8b8238890f121df3e78600912386c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72791

Malicious code in yieldingslugz3n npm...

Malicious code in yielding_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2c08acd5910eac58145365bb73c8f8580b31606edaf33689c2c192c314e53d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50924

Malicious code in yielding-amethyst-scorpion npm...

EUVD-2025-50921

Malicious code in yielding-violet-roadrunner npm...

EUVD-2025-50923

Malicious code in yielding-indigo-turtle npm...

EUVD-2025-50922

Malicious code in yielding-moccasin-coyote npm...

Malicious code in yielding-indigo-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e2a521bb060ff9171cfad4e9d1ebf7728e8276d334b7da57ee5299b2b7a438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71726 Malicious code in yielding-indigo-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e2a521bb060ff9171cfad4e9d1ebf7728e8276d334b7da57ee5299b2b7a438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71728 Malicious code in yielding-violet-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8ed74d52c018d3f436c4e5160d90c813b993365db317db7df3187edfa84127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-39737

CVE-2025-39737 corresponds to a Linux kernel kmemleak issue where soft lockups occurred during cleanup of a large kmemleak object set (e.g., ~40k objects). The provided Astra Linux bulletin notes the fix: in kmemleak_do_cleanup(), periodically call cond_resched() inside the cleanup loop to avoid ...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47710)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47710 advisory. - In the Linux kernel, the following vulnerability has been resolved: sockmap: Add a condresched in sockhashfr...

OESA-2024-1356 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Don't advance iterator after restart due to yielding After dropping mmulock in the TDP MMU, restart the iterator during tdpiternext and do not...