CVE-2025-20050

Uncontrolled search path for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This...

CVE-2025-31937

Out-of-bounds read for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur...

CVE-2025-24838

Improper privilege management for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege...

CVE-2025-27713

Out-of-bounds write for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2025-26694

Null pointer dereference for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially...

CVE-2025-35967

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This...

CVE-2025-35971

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This...

Malicious code in uafaru-tauhauimat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1547c22324ff7c051675d28298468880c75da7e9c04b0dd931962ac54c8b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 292c65ea6b8b41d693acf6c79ce746ac8f169e12db9da28b6497104d8175accf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-149702

Malicious code in teagood-manaki44 npm...

EUVD-2025-146409

Malicious code in verify-ayica-amuinadbhua npm...

EUVD-2025-143988

Malicious code in nabuf-otgaf-doigoafo npm...

Malicious code in @mipta1/gjjd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5162a82fec82292342cda066c8dbde26c551e5f0032d955f7883b9a4e5a247d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143880

Malicious code in nabuf-otin-agogas npm...

Malicious code in teagood-nakamala12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d565bee875091dd9d056054670b1bce3f7e61c8748751c5505c95080973cffcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a7aec4895b7b8083429ada0c556c97859a543d53e2431b4ec338a16dfc70c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42c54412ff27e68f66cc8422bfc54aea71eaa3150f2e73cde14bbd9a729365d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-150136

Malicious code in tadashi-tsssu-tresud npm...

Malicious code in mans-nufatimant-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61fe24fe7a82c9ffc6028dc001ad6d839eec51a80ab23d18c6ddfb88da0f2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebaaf02afd0aa3e73bb5115c020b3b4ab603d8aeb116607813bc3a2178bfe4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...