Malicious code in known_cod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f53d2e5c72b223e0ef8be5b4bd00a0c9875cfe097a9cbcae6566860950c4232a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

curl: Hash exposed in public repository

An image hash is publicly exposed on Github Steps to reproduce: See at https://github.com/curl/curl/blob/master/Dockerfile Solution: If you want to keep the hash, the repository should be private Use official tags without specific hashes or environment variables Best, @skymander Impact An attacke...

EUVD-2025-76456

Malicious code in knownstingray-appteadev npm...

EUVD-2025-76458

Malicious code in knowncoral-strongdev npm...

MAL-2025-98775 Malicious code in known_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ecf83b7097ee4c962c67ac2b6004eeb73471bd2fdce621e918c1a01be339d2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63378

Malicious code in knowncougarz3n npm...

EUVD-2025-63379

Malicious code in knownclamz3n npm...

EUVD-2025-63375

Malicious code in knownrookz3n npm...

EUVD-2025-63374

Malicious code in knownwormz3n npm...

Malicious code in known_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdbec3eb0eea39170bec5b771bf47c1943ca1ace3e9892291fc94ca428ed32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95175 Malicious code in known_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d945c03156d2d82b1ecd30e38d7d71d6bd631eac842c6fcf6318eb81f7658152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53594

Malicious code in known-lime-fish npm...

EUVD-2025-53593

Malicious code in known-sapphire-bat npm...

EUVD-2025-53592

Malicious code in known-white-squirrel npm...

MAL-2025-69055 Malicious code in known-lime-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573cba47d4497d24a67d65a7d66be9acf1c72597dde8ac48fb9394f896958640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-58804

Malicious code in knowntoucanz3n npm...

PT-2025-46450

Name of the Vulnerable Software and Affected Versions Nuance PowerScribe affected versions not specified Description A lack of proper authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network. The issue affects a radiology reporting system used in...

PT-2025-46520

Name of the Vulnerable Software and Affected Versions Format Plugins versions 1.1.1 and earlier Description Format Plugins versions 1.1.1 and earlier are susceptible to a Heap-based Buffer Overflow. Successful exploitation could lead to arbitrary code execution with the privileges of the current...

PT-2025-46402

Name of the Vulnerable Software and Affected Versions IntelR NPU Drivers affected versions not specified Description A protection mechanism failure exists in some IntelR NPU Drivers within Ring 3. This can allow a denial of service. An unprivileged software adversary with an authenticated user an...

PT-2025-46515

Name of the Vulnerable Software and Affected Versions Visual Studio Code CoPilot Chat Extension affected versions not specified Description An issue exists in Visual Studio Code CoPilot Chat Extension related to improper limitation of a pathname to a restricted directory, also known as a 'path...