CVE-2025-60685

A stack buffer overflow exists in the ToToLink A720R Router firmware V4.1.5cu.614B20230630 within the sysconf binary sub401EE0 function. The binary reads the /proc/stat file using fgets into a local buffer and subsequently parses the line using sscanf into a single-byte variable with the %s forma...

Arbitrary Command Injection

Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to Arbitrary Command Injection via the backup and restore processes when handling file path input with shell execution enabled. An attacker can execute arbitrary system commands by supplying specially crafted...

EUVD-2025-178522

Malicious code in higgs-ichnology-paleoceanography-pm2 npm...

EUVD-2025-177039

Malicious code in process-outercore-nestjs-leda npm...

Malicious code in acamar-child-process-oauth-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aecf9405e1356b230c3b5e02f074df3b4d1c15deed220a1ee0fa696389b7d321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178819

Malicious code in fusion-gammarayburst-magnetosphere-child-process npm...

EUVD-2025-176561

Malicious code in sagitta-javascript-process-telesto npm...

EUVD-2025-179736

Malicious code in child-process-stratigraphy-subduction-node-sass npm...

EUVD-2025-176386

Malicious code in sigma-query-interpret-phi-process npm...

EUVD-2025-177624

Malicious code in new-optimize-async-spy-process npm...

EUVD-2025-176912

Malicious code in publish-yildun-magnetosphere-process npm...

EUVD-2025-175857

Malicious code in typeorm-postcss-process-biomimicry npm...

EUVD-2025-177827

Malicious code in minify-report-compress-compress-process npm...

EUVD-2025-176824

Malicious code in quito-process-oscillation-nanotechnology npm...

MAL-2025-190340 Malicious code in winston-process-fetch-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32310e6d14f06422f625862322cf64c1e6a08c795148c10b8a5c50e384c2f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188834 Malicious code in process-loop-zenobia-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da84a8b179398617b8595ea7e18eeda5d4da7cd2cf8ea395a71a7723e12d8124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177043

Malicious code in process-daemon-pipe-try-bundle npm...

EUVD-2025-177026

Malicious code in procyon-slidev-process-webpack npm...

EUVD-2025-175471

Malicious code in xo-helios-child-process-pm2 npm...

Malicious code in remark-loglevel-process-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b2cdb762f4052d4146c3d2d35d10fe3fe6516343cf764c76cc9a051dfc4474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...