CVE-2025-59790

creationtimestamp| type| source ---|---|--- 2025-11-28 13:30:20+00:00| seen| https://seclists.org/oss-sec/2025/q4/216 2025-11-28 14:54:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m6p5bm4dt327 2025-11-28 15:27:39+00:00| seen|...

CVE-2025-13768

creationtimestamp| type| source ---|---|--- 2025-11-28 11:09:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6oqoi2lvt2k...

CVE-2025-66385

creationtimestamp| type| source ---|---|--- 2025-11-28 08:33:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/115626398144315351 2025-11-28 09:29:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ol3jcsly2a...

CVE-2025-58311

creationtimestamp| type| source ---|---|--- 2025-11-28 06:54:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ocg4g3hz26...

CVE-2025-40146

creationtimestamp| type| source ---|---|--- 2025-11-28 05:27:05+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m6o5knijxd2c 2025-11-28 07:23:22+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m6oe2m2whr22 2025-12-03 14:14:49+00:00| seen|...

CVE-2025-66360

creationtimestamp| type| source ---|---|--- 2025-11-28 04:28:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6o2cmg7v52k...

CVE-2025-66270

The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KDE Connect before 25.12 on desktop, KDE Connect before 0.5.4 on iOS, KDE Connect before 1.34.4 on Android, GSConnect before 68, and Valent before 1.0.0.alpha.49...

CVE-2025-66030

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be...

CVE-2025-12003

creationtimestamp| type| source ---|---|--- 2025-11-25 09:28:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6gznug73x2n 2025-11-27 18:57:29+00:00| seen| https://t.me/notlukatsky/7751 2025-11-28 07:46:12+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3m6ofchywas2l...

CVE-2025-13246

creationtimestamp| type| source ---|---|--- 2025-11-16 12:59:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5qrajpgvw2x...

EUVD-2025-137060

Malicious code in riya-28 npm...

EUVD-2025-141516

Malicious code in hokage-28 npm...

EUVD-2025-141304

Malicious code in ira-28 npm...

Malicious code in alvino-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35c967ad901cc6975d654e86d0568fafda4920417f4c2a4e4f6b835ef04b6a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e1ad9fbeeeb5fe17484e58e6bf4b80cc7c32eb3d64d1fc9c9e99a9d5e934e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174764 Malicious code in hokage-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94f50d0589a2beebd3d9ebe37bffe8515e381ec41c60bc91d2e86a5a9baf4d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140415

Malicious code in lia-28 npm...

EUVD-2025-143526

Malicious code in alvino-28 npm...

Malicious code in hokage-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94f50d0589a2beebd3d9ebe37bffe8515e381ec41c60bc91d2e86a5a9baf4d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172777 Malicious code in alvino-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35c967ad901cc6975d654e86d0568fafda4920417f4c2a4e4f6b835ef04b6a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...