EUVD-2025-54338

Malicious code in few-coffee-asp npm...

EUVD-2025-55561

Malicious code in bumpy-olive-asp npm...

MAL-2025-71105 Malicious code in thick-sapphire-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5332104f135ae975fd2232ae0844ea4fe3ffba71e481d6834ff30bbf75e5b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71561 Malicious code in whispering-aqua-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19aaf887e211e6bab96c21bfb9dd9bd5e7e54fbb1b443d3cbf5583ee2da9307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51376

Malicious code in unexpected-teal-asp npm...

Malicious code in grateful-fuchsia-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e81ffe42999a0a485ef53ca5bcac48b228f3df2d4a808156032e2a460b1e485d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52170

Malicious code in scattered-peach-asp npm...

EUVD-2025-51675

Malicious code in supposed-violet-asp npm...

EUVD-2025-51088

Malicious code in whispering-aqua-asp npm...

MAL-2025-67544 Malicious code in critical-blush-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c6548cbc44347102c96058b1f1e8f44b997c1fb933cfa099da75e203569d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ridiculous-turquoise-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25014e82fd77f7ab29f91f9820fcca039894d8761640a40714c1de1075e43d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52265

Malicious code in ridiculous-turquoise-asp npm...

EUVD-2025-51944

Malicious code in soft-gold-asp npm...

EUVD-2025-51906

Malicious code in sparkling-apricot-asp npm...

EUVD-2025-55105

Malicious code in critical-blush-asp npm...

ROS-20251105-07

The vulnerability of Microsoft .NET Framework, .NET software platforms, and Microsoft Visual Studio software development tool is related to insufficiently strong data encryption. Microsoft Visual Studio software development tool is related to insufficiently strong data encryption. Exploitation...

About the security content of macOS Sonoma 14.8.2

About the security content of macOS Sonoma 14.8.2 This document describes the security content of macOS Sonoma 14.8.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

BIT-ASPNET-CORE-2025-55315 ASP.NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an authorized attacker to bypass a security feature over a network...

dotnet: .NET Security Feature Bypass Vulnerability

A flaw was found in ASP.NET Core’s HTTP request handling that leads to inconsistent interpretation of specially crafted HTTP requests. This mismatch can be abused by an authorized network attacker to smuggle or manipulate request boundaries, allowing bypass of security controls or unintended...

dotnet: .NET Security Feature Bypass Vulnerability

A flaw was found in ASP.NET Core’s HTTP request handling that leads to inconsistent interpretation of specially crafted HTTP requests. This mismatch can be abused by an authorized network attacker to smuggle or manipulate request boundaries, allowing bypass of security controls or unintended...