230 matches found
EUVD-2025-91046
Malicious code in intimateboobyz3n npm...
MAL-2025-108209 Malicious code in rough_tarantula_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66288a80f08f582676d3edd0dac24daa62ad4f41033219812d321cea824a9532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-81752 Malicious code in tremendous_loon_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55030e5e21dc9da6e9e2170ca5bca14f1244d9fc7266f5062b1f063ea486ef4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-82396 Malicious code in willing_marten_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3cbc420500015fa0a98a387172e426c147e9a26f5318c92a7a246ea9931f7c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ogi-kue16-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef9bcb6acd650f831c996518fd867b7537b412deae4c06b4b4f7969367d2ce4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-38039
OpenTofu affected denials of service in "tofu init" with maliciously-crafted module package responses...
Privilege Escalation
PyInstaller is vulnerable to Privilege Escalation. The vulnerability is due to the bootstrap process appending a special entry to sys.path and attempting to load an optional bytecode-decryption module while that entry is present, which allows an attacker who can create files/directories next to t...
CVE-2025-49655
Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being...
EUVD-2018-0728
Malware in sbrugna...
EUVD-2018-0338
Malware in sbrugna...
EUVD-2018-0251
Malware in sbrugna...
EUVD-2018-0323
Malware in sbrugna...
EUVD-2018-0356
Malware in sbrugna...
EUVD-2018-0421
Malware in sbrugna...
EUVD-2018-0288
Malware in sbrugna...
EUVD-2018-0235
Malware in sbrugna...
EUVD-2018-0427
Malware in sbrugna...
EUVD-2018-0389
Malware in sbrugna...