8568 matches found
EUVD-2025-179216
Malicious code in earth-small-scale-simulate-static npm...
EUVD-2025-178287
Malicious code in java-theta-theta-zero-static npm...
EUVD-2025-178196
Malicious code in key-static-authorize-authenticate-quick npm...
MAL-2025-186980 Malicious code in final-scale-static-yaml-debug (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ba87a36ae06fd4997f24c35c4cf6157601dad069a9c57e6ae8d43cc88aa435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188122 Malicious code in moon-small-nu-rain-static (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fcf2a1dc5076c624ca43163bb493e90fd98998b7c3805d3aa5c9f1f5817c3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-60694
A stack-based buffer overflow exists in the validatestaticroute function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The function improperly concatenates user-supplied CGI parameters routeipaddr03, routenetmask03, routegateway03 into fixed-size buffers v6,...
CVE-2025-60694
A stack-based buffer overflow exists in the validate_static_route function of the httpd binary on Linksys E1200 v2 routers (specifically firmware E1200_v2.0.11.001_us.tar.gz ). The vulnerability is caused by the improper concatenation of user-supplied CGI parameters—specifically route_ipaddr_0~3,...
MAL-2025-139038 Malicious code in static-red-wasp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a62f8b52870a99829604b5d8e9dec5ec65b122e1e9689702a7625a69dc329e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117064
Malicious code in static-red-wasp npm...
Taught by the Flawed: How Dataset Insecurity Breeds Vulnerable AI Code
AI programming assistants have demonstrated a tendency to generate code containing basic security vulnerabilities. While developers are ultimately responsible for validating and reviewing such outputs, improving the inherent quality of these generated code snippets remains essential. A key...
EUVD-2025-102081
Malicious code in staticbuzzardz3n npm...
EUVD-2025-102080
Malicious code in statichummingbirdz3n npm...
EUVD-2025-94932
Malicious code in staticlemmingz3n npm...
Malicious code in static_lamprey_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18b4d264beba87e06682be89e60c48071b2b39454e0092ea63303cfd7146c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-88671
Malicious code in staticlampreyz3n npm...
EUVD-2025-78228
Malicious code in staticorcaz3n npm...
MAL-2025-109086 Malicious code in static_wombat_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6185b105e09c1ac912ff98b39c66991e53a18cc35b2b3914fbd3d7f9faade5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-73540
Malicious code in staticbobcatz3n npm...