EUVD-2025-116972

Malicious code in ytterbic-azure-muskox npm...

EUVD-2025-117484

Malicious code in cold-azure-thrush npm...

EUVD-2025-117281

Malicious code in junior-azure-lemur npm...

CVE-2025-59504

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally...

CVE-2025-59504

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally...

2025-11 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5068840)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...

CVE-2025-59504 Azure Monitor Agent Remote Code Execution Vulnerability

...

CVE-2025-59504

CVE-2025-59504 is a heap-based buffer overflow vulnerability in Microsoft’s Azure Monitor Agent. Connected sources identify the affected component as the Azure Monitor Agent (Windows), with exploitation possible when running versions prior to 1.37.1. The underlying issue is a heap-based buffer ov...

EUVD-2025-93453

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally...

CVE-2025-59504 Azure Monitor Agent Remote Code Execution Vulnerability

...

KB5068400 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: November 11, 2025

None None...

Azure Monitor Agent Remote Code Execution Vulnerability

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally...

EUVD-2025-74408

Malicious code in oddcrawdadazure-47 npm...

EUVD-2025-74859

Malicious code in bittersilkwormazure-99 npm...

EUVD-2025-74453

Malicious code in minorwombatazure-44 npm...

EUVD-2025-74288

Malicious code in robustcondorazure-100 npm...

EUVD-2025-74877

Malicious code in attractivecobraazure-98 npm...

EUVD-2025-74760

Malicious code in delicateporcupineazure-34 npm...

EUVD-2025-74477

Malicious code in magneticskinkazure-31 npm...

Malicious code in unpleasant_impala_azure-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51159c945d1a3a8b4cfdf413bd6cf783151c34c5de048d5d32601edddd220d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...