4923 matches found
Fake calendar invites are spreading. Here’s how to remove them and prevent more
We’re seeing a surge in phishing calendar invites that users can’t delete, or that keep coming back because they sync across devices. The good news is you can remove them and block future spam by changing a few settings. Most of these unwanted calendar entries are there for phishing purposes. Mos...
CVE-2025-41115 Incorrect privilege assignment
SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management. In Grafana versions 12.x where SCIM provisioning is enabled and configured, a vulnerability in user...
kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugepmdunshare vs GUP-fast race hugepmdunshare drops a reference on a page table that may have previously been shared across processes, potentially turning it into a normal page table used in another process in...
EUVD-2025-176653
Malicious code in restart-warp-webdriver-mocha-sync npm...
EUVD-2025-178714
Malicious code in geomorphology-cressida-sync-atlas npm...
EUVD-2025-176723
Malicious code in relay-dagda-sync-graviton npm...
EUVD-2025-179817
Malicious code in centaurus-perseus-remark-sync npm...
EUVD-2025-176090
Malicious code in sync-hugo-xanadu-module npm...
EUVD-2025-177345
Malicious code in paleontology-sedna-enif-sync npm...
EUVD-2025-179062
Malicious code in eris-sync-loglevel-dorado npm...
EUVD-2025-176088
Malicious code in sync-uglify-js-rest-superagent npm...
Malicious code in init-venus-sync-figures (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b6e40d812a9363fa5f719d89f8033b005cc387fbeadb50dac11ca6fcd9ba44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177393
Malicious code in outercore-sync-fornax-lightyear npm...
EUVD-2025-176089
Malicious code in sync-taurus-cluster-webpack npm...
EUVD-2025-176087
Malicious code in sync-vega-apex-prettier-plugin-markdown npm...
Malicious code in standard-seismology-sync-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb0161e8e9100e0895c5f49e6260a519a05cbc55a4cb32eadbd60fe2619b257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178401
Malicious code in init-venus-sync-figures npm...
EUVD-2025-180232
Malicious code in aurora-sync-buffer-canopus npm...