EUVD-2025-180520

Malicious code in abstract-mu-kappa-authenticate-decode npm...

Malicious code in quick-decode-transpile-array-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789be1eb5319667c7103faae653520c2ac40f78ca9957e497f34f7395845b3d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179688

Malicious code in code-interpret-finally-decode-cold npm...

EUVD-2025-179381

Malicious code in decode-info-new-finally-new npm...

MAL-2025-190090 Malicious code in upsilon-decode-catch-log-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0f728a55c388778d0b6ad28ccfe8a52b73fe5f721ab54b852d2982c0211dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176644

Malicious code in rho-log-cluster-decode-pi npm...

Malicious code in upsilon-decode-catch-log-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0f728a55c388778d0b6ad28ccfe8a52b73fe5f721ab54b852d2982c0211dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177473

Malicious code in old-string-protected-omega-decode npm...

EUVD-2025-175784

Malicious code in upsilon-decode-long-socket-final npm...

EUVD-2025-180201

Malicious code in authorize-signal-report-omicron-decode npm...

EUVD-2025-179382

Malicious code in decode-export-data-cold-error npm...

EUVD-2025-179383

Malicious code in decode-authenticate-final-delta-enum npm...

EUVD-2025-179058

Malicious code in error-bash-monitor-stack-decode npm...

Malicious code in mu-dog-proxy-decode-unix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88cdfbf38d06291aae96e832f05b29f00cfd35589943f585837dc348ec6b1fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175785

Malicious code in upsilon-decode-catch-log-function npm...

EUVD-2025-177626

Malicious code in new-decode-process-orchestrate-balance npm...

EUVD-2025-179691

Malicious code in cluster-wind-decode-sigma-web npm...

Siemens SIMATIC S7-1500 Out-of-bounds Write (CVE-2023-39128)

GNU gdb GDB 13.0.50.20220805-git was discovered to contain a stack overflow via the function adadecode at /gdb/ada-lang.c. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'...

CVE-2025-40129 sunrpc: fix null pointer dereference on zero-length checksum

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

CVE-2025-63153

TOTOLink A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...