MAL-2025-164288 Malicious code in pitra-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ff4396a63cb285bcd0b848a63e178db17af12fecc1a1cae51059f5865ca1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e5fd2b7ea0d63106473dadd84a4f3e90aa17a3709b656e8d7bbe49108d1b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86f2f4200e53df852f355f2b775fbc9f90dad6a2eb45551f5aea67f5a421804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154047 Malicious code in cinta-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e11429efd134ff3c35f9460ecc198bde38d20584c70324cdeba7316c89e539d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159615 Malicious code in manda-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7012dd32e274e73bf310070890bcd4e76b40d610dd20f3fd500dfc98dcb5e8de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152817 Malicious code in aril-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ef53c3449b8f7a49a020da788bb2d1bc69f8e3157de404f059e127a481f2ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165244 Malicious code in ruji-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfba4b832bf953d69a29b837763b5cdca3497c4b4bdff641473e4d76d2795aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Huawei EulerOS: Security Advisory for mod_http2 (EulerOS-SA-2025-2335)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-32009

Summary: CVE-2024-32009 affects Siemens Spectrum Power 4 (all versions

EUVD-2025-93471

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This...

CVE-2025-24512

Improper input validation for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Authorized adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result m...

CVE-2025-24862

Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...

Security Bulletin: Due to the use of Eclipse JGit, IBM webMethods Integration is affected by denial of service, and other security issues.

Summary Eclipse JGit is used by IBM webMethods Integration in repository function CVE-2025-4949 Vulnerability Details CVEID:CVE-2025-4949 DESCRIPTION: In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implemen...

Description of the security update for SharePoint Server 2016: November 11, 2025 (KB5002805)

None None...

EUVD-2025-74491

Malicious code in liberaltakinindigo-2 npm...

EUVD-2025-74868

Malicious code in badaphidplum-2 npm...

MAL-2025-111684 Malicious code in bad_aphid_plum-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0fe7baa2007bf9a7e0a1a4166e476e0ce8f742a791fe0d66bf0c48c2b2803e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74557

Malicious code in hushedsmeltred-2 npm...

Malicious code in creative_anglerfish_brown-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5964f73b416e0c23f7895847220fb2fbd4276ebb2a8e2f2950894b65a67347af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112251 Malicious code in reliable_ape_emerald-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627cfeb1be3681c782f534c8cecb45047b3a58f2f2ef7654664aac2f93fc32e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...