EUVD-2025-176528

Malicious code in sanitize-hot-quick-log-byte npm...

Malicious code in rho-log-cluster-decode-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e158f5e7a59fbb585788a53c6a7097b2252192694188b07c35deacb6bc24a006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179386

Malicious code in debug-container-zeta-load-log npm...

EUVD-2025-176405

Malicious code in shell-integer-optimize-log-promise npm...

EUVD-2025-176534

Malicious code in sandbox-long-compress-book-log npm...

EUVD-2025-178827

Malicious code in function-bundle-log-validate-grid npm...

EUVD-2025-175697

Malicious code in void-fork-zero-log-code npm...

EUVD-2025-178035

Malicious code in log-slow-debug-zero-report npm...

EUVD-2025-180124

Malicious code in bash-runtime-log-static-java npm...

EUVD-2025-176387

Malicious code in sigma-file-signal-log-report npm...

EUVD-2025-178372

Malicious code in interface-stack-mock-execute-log npm...

EUVD-2025-178038

Malicious code in log-cron-execute-small-signal npm...

EUVD-2025-179137

Malicious code in encrypt-meta-authenticate-log-string npm...

Malicious code in sigma-file-signal-log-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e56f9455f2e267b6923668bc3fcc20ae59667c62ffee139e2dfe75c84d11eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178036

Malicious code in log-info-good-promise-user npm...

EUVD-2025-177622

Malicious code in new-transpile-alpha-log-proxy npm...

EUVD-2025-178446

Malicious code in import-log-monitor-rho-function npm...

EUVD-2025-179926

Malicious code in byte-log-float-cold-analyze npm...

CVE-2025-31645

Uncontrolled search path for some System Event Log Viewer Utility software for all versions within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege...

CVE-2025-60698

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub432F60 function in prog.cgi stores user-supplied SetSysLogSettings/IPAddress values in NVRAM via nvramsafeset"SysLogRemoteIPAddress", .... These values are...