EUVD-2025-123896

Malicious code in pegasus-eclipse-electron-builder-materialize npm...

EUVD-2025-121685

Malicious code in sqlite-spawn-ultra-eclipse npm...

EUVD-2025-115283

Malicious code in cluster-elara-eclipse-betelgeuse npm...

MAL-2025-144146 Malicious code in kaus-hyperion-polaris-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9bd7a1286a4e1e9893b11fe52ebfd03d8ef4f1d008b1af6210b476bed676352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148643 Malicious code in thuban-bunyan-sails-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f87d13068d3b1e7ebbe235715548e61fa520b765c466379b4d5c09348677bf3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114251

Malicious code in eclipse-publish-algol-despina npm...

MAL-2025-143500 Malicious code in hyperion-server-eclipse-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd58e9481e031c0504d3d4c1415914d18634ea2b59c9a980a8c56fb93290b048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139321 Malicious code in alphard-eclipse-deneb-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669350bcf59eb37c221ae4778203358027c54bfef1008f0df4c38b211cf9331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141565 Malicious code in dependencies-eclipse-websockets-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6e5431a759d39a0e0c0617d7467bc86541b6958fb8d0453e08ae6eccc56a3be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Security Bulletin: Due to the use of Eclipse JGit, IBM webMethods Integration is affected by denial of service, and other security issues.

Summary Eclipse JGit is used by IBM webMethods Integration in repository function CVE-2025-4949 Vulnerability Details CVEID:CVE-2025-4949 DESCRIPTION: In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implemen...

Eclipse Foundation Revokes Leaked Open VSX Tokens Following Wiz Discovery

Eclipse Foundation, which maintains the open-source Open VSX project, said it has taken steps to revoke a small number of tokens that were leaked within Visual Studio Code VS Code extensions published in the marketplace. The action comes following a report from cloud security company Wiz earlier...

Linux Distros Unpatched Vulnerability : CVE-2025-11965

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Vert.x versions 4.0.0, 4.5.21 and 5.0.0, 5.0.4, a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidd...

Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in IBM Java

Summary IBM Sterling Control Center is affected by vulnerabilities in IBM Java CVE-2025-21587, CVE-2025-30698, CVE-2025-2900 and CVE-2025-4447 Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in Java SE related to the Server: DDL component could allow a remote...

pgcodekeeper 安全漏洞

pgCodeKeeper is an open source Eclipse plugin for database schema management from pgCodeKeeper. A security vulnerability exists in pgcodekeeper version 10.12.0, which stems from storing passwords and usernames in clear text and could lead to the disclosure of sensitive information...

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.24.0 Release.

Red Hat OpenShift Dev Spaces 3.24.0 has been released. Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. The 3.24 release is based on...

Eclipse BlueChi 安全漏洞

Eclipse BlueChi is an open source service control and state management software for Eclipse. A security vulnerability exists in Eclipse BlueChi that originates from a user with root privileges being able to create or overwrite systemd service unit files on managed nodes, which could lead to...

EUVD-2025-35364

Vert.x-Web vulnerable to Stored Cross-site Scripting in directory listings via file names...

EUVD-2025-35593

Vert.x-Web Access Control Flaw in StaticHandler’s Hidden File Protection for Files Under Hidden Directories...

CVE-2025-11965

In Eclipse Vert.x versions 4.0.0, 4.5.21 and 5.0.0, 5.0.4, a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidden directories, allowing unauthorized users to retrieve files within them e.g. '.git/config'...

CVE-2025-11965

In Eclipse Vert.x versions 4.0.0, 4.5.21 and 5.0.0, 5.0.4, a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidden directories, allowing unauthorized users to retrieve files within them e.g. '.git/config'...