Malicious code in gridsome-barnard-express-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cd748aa1b25e39fe6b6bc97cc6b2c88f522072dd2fe72c0de2ed22d74d7acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140993 Malicious code in commitlint-miranda-express-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6c9729e5c963e5d34a195722b7e5ab7ca83819c63665ef44c1069c6b8d8b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123653

Malicious code in pipe-rehype-browserify-express npm...

MAL-2025-142381 Malicious code in express-lint-jsonp-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de6a62b53d4890622b1b329a17d46a7064aadbb7f0dff51a99f4f8fb05f02970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120865

Malicious code in ursa-middleware-express-europa npm...

EUVD-2025-112891

Malicious code in heka-vulcan-spectron-express npm...

MAL-2025-142397 Malicious code in express-yaml-ophiuchus-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6056cfafb6afc410e65e15b7b4d2d799927e7102ac66c802357d7e0e2396c2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142391 Malicious code in express-superagent-javascript-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b794550053245b66618b7061c10440b97b535bc4dad030d638689510877234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142366 Malicious code in express-ariel-antares-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0274a45306399efeb99751314c5ad798fca3103e6af6cba51a2b547aa320a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146386 Malicious code in postcss-deimos-express-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a01bdc174dfd05d600759d6d9aab8707546cd8172951c7e942208348b2d8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149064 Malicious code in ursa-middleware-express-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba207fd9cd33feba39f2088ce036150bd5cfd54db1cbb8c7b108f8a6b527c224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990881)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990881 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Add workaround for Errata i2037 AM65x SR 1.0 Errata i2037 in AM65x/DRA80xM...

Remote Code Execution (RCE)

cn.hutool, hutool-extra is vulnerable to remote code execution RCE. The vulnerability is due to improper expression handling in the QLExpressEngine class, which allows an attacker to execute arbitrary expressions leading to arbitrary method invocation and potential remote code execution...

kernel: bonding: check xdp prog when set bond mode

In the Linux kernel, the following vulnerability has been resolved: bonding: check xdp prog when set bond mode Following operations can trigger a warning1: ip netns add ns1 ip netns exec ns1 ip link add bond0 type bond mode balance-rr ip netns exec ns1 ip link set dev bond0 xdp obj afxdpkern.o se...

Malicious Package

Overview swagger-express-evaluator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2025-50838

Malicious code in swagger-express-evaluator npm...

Malicious code in swagger-express-evaluator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b56a0de351341937c692d88411f2d8b6c638192e34d63cef6c3815aa379d278 The package swagger-express-evaluator was found to contain malicious code. Source: ghsa-malware...

MAL-2025-66549 Malicious code in swagger-express-evaluator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b56a0de351341937c692d88411f2d8b6c638192e34d63cef6c3815aa379d278 The package swagger-express-evaluator was found to contain malicious code. Source: ghsa-malware...

Cisco Unified Contact Center Express Code Issue Vulnerability

Cisco Unified Contact Center Express Unified CCX is a customer relationship management component of a unified communications solution from Cisco. The component supports features such as self-service voice, call distribution, and customer access control. A security vulnerability exists in Cisco...

Cisco Unified Contact Center Express Code Issue Vulnerability

Cisco Unified Contact Center Express Unified CCX is a customer relationship management component of a unified communications solution from Cisco. The component supports features such as self-service voice, call distribution, and customer access control. A security vulnerability exists in Cisco...