MAL-2025-188780 Malicious code in postcss-loader-hapi-publish-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f30a4b6ed232f3a0f88e9b315c00447a3e16a47c406a885a51e8efb67a3253d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-kastra-event-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2df2510f2f174eab60a7a3916ad6759fd87b80db2bd5c6f9164cf9fcc0be69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177577

Malicious code in node-config-cross-env-event-fomalhaut npm...

Malicious code in radiant-event-bootstrap-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d884f8f8fe69d800ff13733a4da5865fd63f1846cee21ddf7997124ae41773ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176914

Malicious code in publish-webdriverio-event-capella npm...

Malicious code in await-jwt-vuetify-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd21812b96907664c208aee1e22aaf7d46e2eaf9437d6f4a0c8a6f0731f689fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178034

Malicious code in loglevel-event-resonance-umbriel npm...

Malicious code in pyxis-alphard-event-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516651765e6ec2134077f6e0128dfeea44e2a4ea76469186f299a7daa07bf2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179006

Malicious code in event-husky-tachyon-auth0 npm...

EUVD-2025-177068

Malicious code in prettier-plugin-markdown-toml-reveal-md-event npm...

EUVD-2025-179605

Malicious code in config-event-install-lacerta npm...

MAL-2025-188761 Malicious code in polaris-build-event-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5870c41fb0c9b2494b76d327532e4ff9b679ae512b5700ee30c24b2d374aed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188961 Malicious code in publish-webdriverio-event-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13ec41d982e5391f4a58b51051dc7c843a88857fae8f519de3e3ae4dcd6f643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186876 Malicious code in event-husky-tachyon-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d6d40bbd46796ffe0433b9e3e0fd88b76fb46ceb7a4973ff526bea29bf1b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-31645

Uncontrolled search path for some System Event Log Viewer Utility software for all versions within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege...

EUVD-2025-150387

In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctpdisposition sctpsfdo51Dce If newasoc-peer.adaptationind=0 and sctpulpeventmakeauthkey=0 and sctpulpeventmakeauthkey returns 0, then the variable aiev remains zero and the zero will be...

CVE-2025-40207

creationtimestamp| type| source ---|---|--- 2025-11-13 00:11:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5huwca35x2a 2025-12-23 14:57:28+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3manz3ha3ok2r 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-40198

creationtimestamp| type| source ---|---|--- 2025-11-12 23:51:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5htsunc442x 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2021-4464

creationtimestamp| type| source ---|---|--- 2025-11-12 22:40:25+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hptlpwk742 2025-11-13 02:16:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5i3w72lf72a...

CVE-2021-4463

creationtimestamp| type| source ---|---|--- 2025-11-12 22:40:24+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hpthcpoxh2 2025-11-13 01:48:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5i2dygsf52s 2025-11-13 21:02:33+00:00| seen|...