MAL-2025-173238 Malicious code in buis-suinana-mamovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f397936297864215b702725af63d508c6e9ab1b42f57b0c362986d502117ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-61830

Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install...

EUVD-2025-131923

A maliciously crafted JPG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

EUVD-2025-131922

A maliciously crafted DWG file, when parsed through Autodesk 3ds Max, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

EUVD-2025-131912

The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...

EUVD-2025-131909

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...

MAL-2025-172303 Malicious code in augis-pomo9r-nusfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c8b8f9965cc0ed1b2180348071247f4d2da865605bd0ddf458193ef97283b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172607 Malicious code in verts-otimon-ogia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d872cb297818c843979df19ba96cb5749ce1d6e9959133537ca33c1899969b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146007

Malicious code in ameennaseem npm...

EUVD-2025-145066

Malicious code in rafaelrocha npm...

Malicious code in alyssaadams (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0312a194e9a9a5d8e68d55243e4e4137dd749dcc1debfacca229961ba84986fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171724 Malicious code in planetplanner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13082571953383e36893dedaeafb207ca1bc7a35e244964bddb2fe7d7544c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146127

Malicious code in agussurya npm...

MAL-2025-170787 Malicious code in alexanderwhite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342cd5c3c12f415d40217860aa78a43c0b7050c997f83913a5149d847bafd783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144977

Malicious code in se7enstar npm...

EUVD-2025-144927

Malicious code in solarhunter npm...

Malicious code in saadimran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6edbfa7baf2c55bc1c8fc984e80ec112f9efd5a53d0c54f5166f197cb465b578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-145269

Malicious code in maqsoodabdul npm...

EUVD-2025-145537

Malicious code in gracesmith npm...

CVE-2025-24307

Improper privilege management for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data manipulation. This...