EUVD-2025-117010

Malicious code in valid-crimson-hippopotamus npm...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990875)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990875 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check numvalidsets before accessing readerwmsets WHY & HOW numvalidsets needs to...

EUVD-2025-101060

Malicious code in validflamingoz3n npm...

EUVD-2025-88124

Malicious code in validgazellez3n npm...

EUVD-2025-88125

Malicious code in validcanidaez3n npm...

EUVD-2025-75301

Malicious code in validearwig-appteadev npm...

EUVD-2025-77996

Malicious code in validcatfishz3n npm...

MAL-2025-110319 Malicious code in valid_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d4f6378d1dfa46b140466976c95edf1c3f391d4112d33f765706c337e0cb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77997

Malicious code in validbarnaclez3n npm...

EUVD-2025-83750

Malicious code in validmarmotz3n npm...

EUVD-2025-71303

Malicious code in validhedgehogz3n npm...

Malicious code in valid_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6332d566e9029a7f9020466893a5e21faaca6af3dee5f22cb8d8bf914848192e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valid-salmon-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56acc6830d2b06cc8ab4af0b5eb9c813d71b32658c54285d1cf808658749b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51255

Malicious code in valid-turquoise-emu npm...

EUVD-2025-51256

Malicious code in valid-salmon-leech npm...

Malicious code in valid_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e5f081f955afbfc8de5f7523bdd2c328def4f198b4e46426ee2f5f63d0dd6b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49107

Malicious code in validmarmosetz3n npm...

EUVD-2025-44759

Malicious code in validsilkwormz3n npm...

EUVD-2025-44760

Malicious code in validroosterz3n npm...

CVE-2025-64178 Jellysweep uses uncontrolled data in image cache API endpoint

Jellysweep is a cleanup tool for the Jellyfin media server. In versions 0.12.1 and below, /api/images/cache, used to download media posters from the server, accepted a URL parameter that was directly passed to the cache package, which downloaded the poster from this URL. This URL parameter can be...