curl: Functional Regression in Digest Authentication: Failure to handle optional spaces and escaped quotes

Summary A recent migration of the Digest authentication parsing logic to the curlxstr strparse API introduced two functional parsing regressions in lib/vauth/digest.c. 1. Optional Whitespace OWS Handling The current implementation fails to skip optional whitespace after comma delimiters in...

EUVD-2025-177184

Malicious code in pi-authenticate-cold-encrypt-alert npm...

EUVD-2025-179137

Malicious code in encrypt-meta-authenticate-log-string npm...

EUVD-2025-180219

Malicious code in authenticate-array-cluster-mock-import npm...

EUVD-2025-178196

Malicious code in key-static-authorize-authenticate-quick npm...

EUVD-2025-180520

Malicious code in abstract-mu-kappa-authenticate-decode npm...

EUVD-2025-179383

Malicious code in decode-authenticate-final-delta-enum npm...

EUVD-2025-177883

Malicious code in meta-grep-stack-serialize-authenticate npm...

EUVD-2025-180180

Malicious code in await-tree-cat-omega-authenticate npm...

EUVD-2025-178380

Malicious code in integer-optimize-alpha-byte-authenticate npm...

EUVD-2025-180102

Malicious code in beta-error-rho-authenticate-tree npm...

EUVD-2025-176426

Malicious code in serialize-bash-authenticate-execute-cloud npm...

EUVD-2025-176085

Malicious code in table-authorize-authenticate-assert-pi npm...

EUVD-2025-176424

Malicious code in serialize-eta-authenticate-authorize-sigma npm...

EUVD-2025-179761

Malicious code in char-cat-execute-eta-authenticate npm...

Malicious code in minify-mu-catch-authenticate-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3b2212cf649bbcec1267832b53976a224b9a0387e17e082b8641dda41bc920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176381

Malicious code in signal-authenticate-cluster-await-byte npm...

EUVD-2025-178935

Malicious code in fast-sudo-fire-chi-authenticate npm...

EUVD-2025-177829

Malicious code in minify-mu-catch-authenticate-user npm...

EUVD-2025-180457

Malicious code in alpha-authenticate-serialize-long-try npm...