EUVD-2025-115352

Malicious code in child-process-registry-chai-nashira npm...

EUVD-2025-116731

Malicious code in altair-umbriel-child-process-cross-env npm...

EUVD-2025-113781

Malicious code in event-transform-apex-child-process npm...

MAL-2025-144171 Malicious code in kinetic-exec-spectron-webdriver-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7effbcd1496d9a2517931b273a2bd6b3fe910ed3cc3d39cb648b766711de01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-wasat-kronos-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d110ed903961a6950cf5de4019f0f337122fadc51bed27728ef56e34211a329b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115356

Malicious code in child-process-metalsmith-sadr-nextjs npm...

EUVD-2025-115374

Malicious code in charon-semantic-release-nashira-child-process npm...

EUVD-2025-115348

Malicious code in child-process-zenobia-mocha-despina npm...

MAL-2025-144624 Malicious code in magellan-blitz-atlas-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2340dbf5fc23d6a3011d549871d854a58569177ed1163b8a7fe224213778d119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140747 Malicious code in child-process-framework-metalsmith-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849be0aae93e5cfbd3e6a735ee71094677ea146394d513afeaba71ce013d555d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142856 Malicious code in geckodriver-betelgeuse-child-process-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31abebe698d8af8cbc8ebce961177393b1d102428f71683195d47280d39b7ea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143089 Malicious code in grus-child-process-server-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b28413cef90aca4f8fabcb9fcb9cc4c3737e32a1247520c569f1d849bef559a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149883 Malicious code in zephyr-child-process-apollo-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cdf2cdaee2edc3bdaa3dafa44c797d167187a3a3f86acedc1d2c42d0b8ced5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140757 Malicious code in child-process-telesto-test-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173fd53c1da999600d870a02683e28098bb3288c9a590b7739013b33c2b68fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115475

Malicious code in chakra-ui-webdriver-mocha-pavo-child-process npm...

MAL-2025-148874 Malicious code in uglify-js-hexo-zenobia-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934967d7940b8009db69a6f57f4813c107293a76d651412f11a90960aed262c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139444 Malicious code in antares-uglify-js-child-process-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101a83ce1b47d6ca195fd753246395dd6d373fd39ac9b2d8551b942b35b0297f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Mozilla Firefox Code Execution Vulnerability (CNVD-2025-26886)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a code execution vulnerability that is caused by the use of a WebGPU internal release triggered by an infected child process. An attacker could exploit the vulnerability to...

CVE-2025-12380

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2...

CVE-2025-12380 Use-after-free in WebGPU internals triggered from a compromised child process

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2...