EUVD-2025-50893

Malicious code in yummy-tan-eagle npm...

Malicious code in voluntary-emerald-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1608b22b8b23eee95932386aa0cbda88b0fb323f5186e726d3c5bdbadd64f807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52711

Malicious code in positive-scarlet-eagle npm...

EUVD-2025-51645

Malicious code in suspicious-amethyst-eagle npm...

MAL-2025-69079 Malicious code in leading-pink-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973dc10a64c9b1696a021b4bbb3c9007b438dca59af0f071d7e9da22441ffd1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68573 Malicious code in grand-violet-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce2acb8108780ad6fcb19d3dc4ed8fb862b7f4a5e9d3943b0fb5de2cea99748b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68637 Malicious code in handsome-sapphire-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988195d3d8a1fde62ee7fd53cf1673a85bcf5fc56456c05e6844e17571b7de2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proud_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6c72a72c704e00218a042c52a667ec11c1055099270dd25b28b03570a66d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-58164

Malicious code in neateaglez3n npm...

EUVD-2025-60254

Malicious code in conservationeaglez3n npm...

Malicious code in energetic_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f8a252c474f50b13e08e8f301fe024257745e5022e7e09507c7624b1606d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50295

Malicious code in energeticeaglez3n npm...

EUVD-2025-50247

Malicious code in expensiveeaglez3n npm...

EUVD-2025-46363

Malicious code in mechanicaleaglez3n npm...

CVE-2025-62776

The installer of WTW EAGLE for Windows 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...

CVE-2025-62776

The installer of WTW EAGLE for Windows 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...

EUVD-2025-36592

The installer of WTW EAGLE for Windows 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...

CVE-2025-62776

CVE-2025-62776 concerns the Windows installer for WTW EAGLE 3.0.8.0, which has an insecure DLL search path that can lead to loading arbitrary DLLs and executing code with the installer's privileges. The root cause is an uncontrolled search path element (CWE-427) affecting the installer. Documente...

CVE-2025-62776

The installer of WTW EAGLE for Windows 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...

CVE-2025-62776

The installer of WTW EAGLE for Windows 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...