278188 matches found
MAL-2025-186866 Malicious code in europa-augmentedreality-redgiant-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e016ee1a0dd17c2e68725b2ba976f4a101ae5c9a4b06daee9cc37a2f540c5009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179964
Malicious code in browserify-seismology-vega-quito npm...
EUVD-2025-178743
Malicious code in gemini-hydrogeology-panspermia-standard npm...
EUVD-2025-180020
Malicious code in blueshift-exoplanet-buffer-primatology npm...
Malicious code in paleoceanography-shelljs-umbriel-galaxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2386202e5955957868e619896d6eb531b3f4a1f167c4964e7c4ce5d273871974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in emulate-await-sudo-code-grid (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754e83206c67625a2f588a8c5c27a9ffe36bc0e8ceea38941dc9bd3eab8690a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sanitize-hot-quick-log-byte (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b181ef62ba0365ea1c72e8ce33e599496c5c070e8fd9690785ab4e1121f5c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-27249
Uncontrolled resource consumption for some Gaudi software before version 1.21.0 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occu...
CVE-2025-32449
Unquoted search path for some PRI Driver software before version 03.03.1002 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...
CVE-2025-24299
Improper input validation for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This...
CVE-2025-47222
A class name enumeration was found in Keyfactor SignServer versions prior to 7.3.2. Setting any chosen class name to any of the properties requiring a class path and the provided class is not expected to return different errors if the class exists in deployment or not. This returns information...
IBM AIX和IBM VIOS 安全漏洞
IBM AIX and IBM VIOS are both products of the International Business Machines IBM Corporation.IBM AIX is an open standards-based UNIX operating system developed for the IBM Power architecture.IBM VIOS is part of the PowerVm® Editions hardware feature set.IBM AIX is an open standards-based UNIX...
Palo Alto Networks PAN-OS 安全漏洞
Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS that stems from improper handling of specially crafted packets in the data plane, which could lead to a denial of servic...
EUVD-2025-138088
Malicious code in avarage-olios-noilagagi npm...
Malicious code in modiov-khan-avcafivaid (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fa94e87d73c216ebfb4394a898a713981b9e7138d7c1a4b1064fb2d46fef12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in modiov-khan-avcafivd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74b1df911e9451218a2eda33fce673b8786368c82cfd2ce2c81f3ac01852275b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-182420 Malicious code in imodiov-kufni-acumnacffgteafgrdcaavfhaebfac (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6e9192a1f7b0759bcb577daacd5a88259a6361350d2d2445cdde6f5fbccee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lobac-ubb-gaub (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d7c0b8f5ef35fb618fa473047b1032d67e131366c9de9b6f3fc42cdf9f478b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...