Malicious code in dia-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc8c7af238d58b1a789ef617f02c95fc53758cae3f37fbe1f04662590bf4bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac397f11739cd0bc344471db259d6c1481ca29035dad9f3a1557cef3a705d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155588 Malicious code in hafiz-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e7bf2b7c0516cc3b1532dee13f94992f6d905b83b2bd153b1e2b9076e16e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152472 Malicious code in alvira-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd4ab0a93029666775833b61f3d081172dc039d4573684c846e9aa6feb6a8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156283 Malicious code in ilop-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac397f11739cd0bc344471db259d6c1481ca29035dad9f3a1557cef3a705d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164903 Malicious code in rita-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ad773b021ab9e4e2feb8f2204c8abdb84f8712ac041259571172efe1028702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165258 Malicious code in ruji-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd446a0a7e389993db530dcbfe49c558fc7206c9f56debe536619733bd7772b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swift_dragon_green-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b51fb18bf8430096563d6f2aa932669cb667a1d81503b210fa97f967a97e3f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EulerOS 2.0 SP10 : libssh (EulerOS-SA-2025-2420)

According to the versions of the libssh package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to sshgetfingerprinthash...

CVE-2025-63289

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an overly wide PPMAGICMASK definition that could cause a 32-bit system to crash...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990796)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990796 advisory. In the Linux kernel, the following vulnerability has been resolved: ntfs: check overflow when iterating ATTRRECORDs Kernel iterates over ATTRRECORDs in mft record in...

2025-11 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5068791)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

EUVD-2025-74240

Malicious code in skilledwildebeestbeige-32 npm...

EUVD-2025-74528

Malicious code in intactgulljade-32 npm...

Malicious code in convincing_boar_harlequin-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f42b51ea34fa1556f0adcc2472c89ad6d7e572dd723aa5faf39ec09c16ed10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74790

Malicious code in convincingboarharlequin-32 npm...

EUVD-2025-74694

Malicious code in encouragingstarfishamethyst-32 npm...

EUVD-2025-74193

Malicious code in strategiclemurolive-32 npm...

Microsoft SQL Server SQL注入漏洞

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is applied under the Microsoft Windows system. A SQL injection vulnerability exists in Microsoft SQL Server. An attacker can exploit the vulnerability to elevate privileges. The following products and...