PATCHEVAL: A New Benchmark for Evaluating LLMs on Patching Real-World Vulnerabilities

Software vulnerabilities are increasing at an alarming rate. However, manual patching is both time-consuming and resource-intensive, while existing automated vulnerability repair AVR techniques remain limited in effectiveness. Recent advances in large language models LLMs have opened a new paradi...

CVE-2025-40118

In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod Since commit f7b705c238d1 "scsi: pm80xx: Set phyattached to zero when device is gone" UBSAN reports: UBSAN: array-index-out-of-bounds in drivers/scsi/pm8001/pm8001sas.c:786:...

EUVD-2025-158263

The Comment Edit Core – Simple Comment Editing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.0 via the 'ajaxgetcomment' function. This makes it possible for unauthenticated attackers to extract sensitive data including user IDs, IP...

EUVD-2025-137515

Malicious code in polymer-ids-raf npm...

EUVD-2025-137529

Malicious code in polymer-ids-doraemagaf npm...

EUVD-2025-137517

Malicious code in polymer-ids-radaf npm...

EUVD-2025-137523

Malicious code in polymer-ids-dorgaf npm...

Malicious code in polymer-ids-doreagaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3897fee034dbf03e564dec87e8315ecd1e3f47b08e9413ff098cd297a7b837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ids-rgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da834e3b90985bb2f5625317a8b3ffc73eb030d0db219252be3913f35fa4beba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ids-dorgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c3e96b0ef011c8b79011dcd591fd78a55c8397a52fcc2ac89b1076bd5c1a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137527

Malicious code in polymer-ids-doragaf npm...

EUVD-2025-137521

Malicious code in polymer-ids-drgaf npm...

EUVD-2025-137519

Malicious code in polymer-ids-raaf npm...

EUVD-2025-137513

Malicious code in polymer-ids-rgaf npm...

Malicious code in polymer-ids-raf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecc24344f80327cd8a99203e40ddbbcbabd9cb3942acd33e56542fb9ddbd3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137525

Malicious code in polymer-ids-doreagaf npm...

EUVD-2025-137531

Malicious code in polymer-ids-doraeagaf npm...

MAL-2025-178063 Malicious code in polymer-ids-doragaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856e8539e3333a44708b8953e24cbc44a95f38ae2cbea869ccbdd6f7ed7c3149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178062 Malicious code in polymer-ids-doraemagaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90770538b2bb53f16e1351781c02615f5362528313f9c86e2ceb03d80c210ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178061 Malicious code in polymer-ids-doraeagaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705be2035e20d0ba344828867e5b1e6dbba494b6ec2cf7e3ad542820c52fff86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...