10288 matches found
MAL-2025-148937 Malicious code in umbriel-colors-vulcan-global (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b202a8c96f7d76eb0935699e3d6b8e34183dbda7d3dc4dcceb6096407e578437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145009 Malicious code in mira-global-docusaurus-webdriver-manager (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bfcb6442d80637c44c046ad152f6906b1d7c2c9c003ffe0801fb69f3354a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115773
Malicious code in callisto-global-kronos-remark npm...
MAL-2025-142939 Malicious code in global-karma-socketio-algol (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0241b4284d51930d8f79f4a26732e32fd0daa7662b27526d3f2e8df46389bb87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144426 Malicious code in link-stream-global-upgrade (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f092b3a5f594f4680772e986c332edf9177a9c2c59021a558a60473af3db464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142951 Malicious code in global-toml-vuepress-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a8cdb722e96e67d2348f504d26379d9b7b8862df3266e39cbf1756954a7aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144853 Malicious code in mensa-global-promise-upgrade (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c94e7b9cf8e7ef681f2d8b9d20af61cfbb0ab1bd542dbba0f84d592e384c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139659 Malicious code in atlas-standard-global-jekyll (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e6f40857900117e23b70df586911da4b9a5d7ea29996d0dc9e08ae33ccf5c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124060
Malicious code in optimize-css-assets-webpack-plugin-global-titan-ganymede npm...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990753)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990753 advisory. In the Linux kernel, the following vulnerability has been resolved: gfs2: Check sbbsizeshift after reading superblock Fuzzers like to scribble over sbbsizeshift but ...
PT-2025-46878
Name of the Vulnerable Software and Affected Versions Vega versions prior to 6.2.0 vega-expression versions prior to 6.1.0 vega-interpreter versions prior to 2.2.1 vega-expression versions prior to 5.2.1 vega-interpreter versions prior to 1.2.1 Description Vega is a visualization grammar used for...
EUVD-2025-98466
Malicious code in globalbeaverz3n npm...
EUVD-2025-98464
Malicious code in globalleoponz3n npm...
EUVD-2025-98465
Malicious code in globalearthwormz3n npm...
Malicious code in global_weasel_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 261e149f3b6b86724ba37ece0083341a4fb853b865f11a1c42e87e20e8be5416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-64689
In JetBrains YouTrack before 2025.3.104432 misconfiguration in the Junie could lead to exposure of the global Junie token...
CVE-2025-12787 Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Generation
The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to unauthorized booking cancellation in all versions up to, and including, 1.1.27. This is due to the plugin's "tfhbmeetingformsubmitcallback" function using insufficiently random values to generate...
EUVD-2025-63854
Malicious code in globalmandrillz3n npm...
Malicious code in global_mandrill_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d2173b8e8569db3a1d6613186ef9ac1a939cef19c0230e61abbd02830be3a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...