PT-2025-46571

Name of the Vulnerable Software and Affected Versions a+HRD affected versions not specified Description The software contains a Stored Cross-Site Scripting issue. This allows remote attackers with administrator privileges to inject persistent JavaScript code. This code is executed in users'...

EUVD-2025-103044

Malicious code in persistentmongoosez3n npm...

EUVD-2025-103045

Malicious code in persistentcardinalz3n npm...

MAL-2025-117973 Malicious code in wati-kupat33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5eb946f2f453f3b83a1da4aae782d6d49e114d68cdcb8df2befa307e296bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-89490

Malicious code in persistentclamz3n npm...

EUVD-2025-89489

Malicious code in persistentswordfishz3n npm...

CVE-2025-11085

A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS. This vulnerability can result in the execution of malicious JavaScript, allowing for account takeover, credential theft, or redirection to a malicious website...

kernel: ring-buffer: Validate the persistent meta data subbuf array

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subbuf array The meta data for a mapped ring buffer contains an array of indexes of all the subbuffers. The first entry is the reader page, and the rest of the entries lay out the...

EUVD-2025-74369

Malicious code in persistentmothblush-42 npm...

EUVD-2025-76038

Malicious code in persistentmole-notthedev npm...

EUVD-2025-76037

Malicious code in persistentmule-apptea npm...

EUVD-2025-62676

Malicious code in persistentnewtz3n npm...

EUVD-2025-67793

Malicious code in persistentorcaz3n npm...

Malicious code in persistent-copper-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a35835de5af4134ea4c67d8d02888cd8da6b7c4356444e28b497c1a698a554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52774

Malicious code in persistent-white-jay npm...

MAL-2025-69871 Malicious code in persistent-copper-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d89f89bc38576e1ef521540c2bcb734bc0e92457c2ae0e485624e5b2d7a1a41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent-white-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9443d1136148155802d5fcdad0fac7678a03c4cca7c360900cd41737b7416bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52776

Malicious code in persistent-orange-finch npm...

EUVD-2025-52779

Malicious code in persistent-beige-stingray npm...

MAL-2025-69875 Malicious code in persistent-white-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9443d1136148155802d5fcdad0fac7678a03c4cca7c360900cd41737b7416bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...