8826 matches found
EUVD-2025-114604
Malicious code in deimos-sass-loader-quark-dotenv npm...
EUVD-2025-111508
Malicious code in lyra-eleventy-phenomic-css-loader npm...
Malicious code in perseus-less-loader-uninstall-enceladus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0acd2d52c31594304a5cb4d7f1f978a7ccb708ecc08f763b3b072edd8a37b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116554
Malicious code in aquarius-sass-loader-morgan-unuk npm...
Malicious code in postcss-loader-commitizen-foundation-xenos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3544c8a28f043aa9e67e4ced4509db2908ad6675975cdeb4198f6d034572831a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123528
Malicious code in postcss-loader-elara-izar-pino-pretty npm...
EUVD-2025-122447
Malicious code in rocket-orbit-grus-sass-loader npm...
EUVD-2025-122243
Malicious code in sass-loader-nightwatch-await-hermes npm...
MAL-2025-145461 Malicious code in nightwatch-css-loader-charon-gemini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44f89d3df24791b88771155d9b2f6a6e5560407e4703e03a79c06a90ca59d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122245
Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin npm...
EUVD-2025-123913
Malicious code in pavo-registry-sass-loader-barnard npm...
Malicious code in perseus-postcss-loader-thuban-cosmiconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f8b923d176dbf13f318330091afc5a22441ff682eae8e7d2c7fc2859adbf1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147781 Malicious code in sedna-parcel-css-loader-materialize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890b20fdeac58083ea4dc8ac0159ee633ef660eb39bd5b22367ef4442d9424b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115859
Malicious code in bunyan-less-loader-tethys-playwright npm...
EUVD-2025-116187
Malicious code in barnard-nova-sass-loader-configstore npm...
Malicious code in jekyll-transport-fusion-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90acc8ffa85bac80ebe5f7d7f7ff730194b5d208154fe0f059cf44abad400c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148520 Malicious code in terser-flare-css-loader-pipe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691bda64b8884a4f1061ba8baa4801188477d843430b4571326d701603b5b08c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Unbreakable Enterprise kernel security update
5.4.17-2136.349.3.1 - i40e: add validation for ringlen param Lukasz Czapnik Orabug: 38604171 CVE-2025-39973 - i40e: increase max descriptors for XL710 Justin Bronder Orabug: 38604171 CVE-2025-39973 5.4.17-2136.349.3 - Revert 'net/mlx5e: Update and set Xon/Xoff upon MTU set' Jakub Kicinski Orabug:...
Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc
🚀 Overview This report demonstrates a real-world privilege escalation vulnerability in pdfminer.six due to unsafe usage of Python's pickle module for CMap file loading. It shows how a low-privileged user can gain root access or escalate to any service account by exploiting insecure deserializatio...