EUVD-2025-54758

Malicious code in due-fuchsia-scallop npm...

EUVD-2025-55041

Malicious code in daily-fuchsia-eagle npm...

EUVD-2025-51089

Malicious code in wet-fuchsia-squid npm...

Malicious code in christian-fuchsia-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad0cd99fd16176c5da0f8a4ac26e7b91c5a6e10da9281d9a4e78f8aa65b08e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51070

Malicious code in widespread-fuchsia-chipmunk npm...

MAL-2025-69260 Malicious code in main-fuchsia-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291b3394a7972fa6f001e533ee6ed1a22f9a8719f5fa46028be013568e4a33de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67279 Malicious code in colonial-fuchsia-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662a0a8c9007c727438c85e0fe7387b7819bd11b13cc7c3c27ad68cc1382d4d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69716 Malicious code in only-fuchsia-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f503f1c712673f1c6cc4107633e87985b17fdc2db6a64f00031528a901bf071a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55370

Malicious code in colonial-fuchsia-crocodile npm...

EUVD-2025-51391

Malicious code in underlying-fuchsia-wren npm...

MAL-2025-71034 Malicious code in tall-fuchsia-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a83ef88c226526ab9d33db01d385f810d27e37ec0e1c72648177d75e331093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67552 Malicious code in crooked-fuchsia-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2674798ae8d454c04ca54600a82ddb297b30bb147d68d80fe5e480516d5638c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54779

Malicious code in driving-fuchsia-aardwolf npm...

EUVD-2025-54879

Malicious code in dirty-fuchsia-viper npm...

EUVD-2024-32906

Malicious code in bioql PyPI...

EUVD-2022-15439

Malicious code in bioql PyPI...

CVE-2022-0882

A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required capability ZXRSRCKINDROOT. It is recommended to upgrade the Fuchsia kernel to 4.1.1 or greater...

CVE-2024-10604

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances...

CVE-2024-10604

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances...

CVE-2024-10604

CVE-2024-10604 affects Fuchsia’s network header field generation algorithms. Vulnerable components include the TCP Initial Sequence Number (ISN), TCP timestamp, TCP/UDP source ports, and IPv4/IPv6 fragment IDs, which can be guessed under certain circumstances. The available connected sources iden...