5008 matches found
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
EUVD-2025-198845
Malicious code in axios-builder npm...
MAL-2025-190832 Malicious code in axios-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c726ee1f437e2d41e6315304248feeb9214b2418b2a9662d27e0adec579c454 The package axios-builder was found to contain malicious code. Source: ghsa-malware f8ff42a488c5cabfb90c3ab47735ddb22959b3dfe23243360ac54c4db3da54af...
Malicious code in axios-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c726ee1f437e2d41e6315304248feeb9214b2418b2a9662d27e0adec579c454 The package axios-builder was found to contain malicious code. Source: ghsa-malware f8ff42a488c5cabfb90c3ab47735ddb22959b3dfe23243360ac54c4db3da54af...
Security Bulletin: Multiple Vulnerabilities in IBM Decision Optimization for Cloud Pak for Data (CVE-2025-6493, CVE-2025-55163 and CVE-2025-58754)
Summary Multiple Vulnerabilities were addressed in IBM Decision Optimization for Cloud Pak for Data version 5.2.2. Vulnerability Details CVEID:CVE-2025-55163 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty i...
TencentOS Server 4: grafana (TSSA-2025:0747)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0747 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Security Bulletin: URI Handling Vulnerability Causes Unbounded Memory Allocation (DoS)
Summary Axios is a promise based HTTP client for the browser and Node.js. When Axios prior to versions 0.30.2 and 1.12.0 runs on Node.js and is given a URL with the data: scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory Buffer/Blob and return...
Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2025-58754)
Summary IBM Security SOAR uses an older version of axios that may be identified and exploited. Updates for supported versions have been released which address this issue. Vulnerability Details CVEID:CVE-2025-58754 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. When...
EUVD-2025-178006
Malicious code in luminescence-pino-superagent-axios npm...
EUVD-2025-180168
Malicious code in axios-mineralogy-pyxis-janus npm...
EUVD-2025-179135
Malicious code in enif-axios-schema-biotechnology npm...
Malicious code in dactyl-loopback-axios-lacerta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ef9b4077e3c6ce19e631255d57d1edaaaa35e2479ccaad486e1d3e0d6f9a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175900
Malicious code in transhumanism-registry-nucleosynthesis-axios npm...
EUVD-2025-180167
Malicious code in axios-neutrino-fomalhaut-perturbation npm...
EUVD-2025-180069
Malicious code in biohacking-axios-pegasus-sirius npm...
EUVD-2025-177457
Malicious code in on-eigenstate-eslint-plugin-axios npm...
Malicious code in graviton-command-global-axios (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845414344cf37948a469b18b04fe8781a6a8a9e6b92f158967769b81e803f446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bulma-titan-axios-ariel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefa58ff6412b2a7d3639037d582e5057b746e53319c75443b3aeca613e7b575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...