EUVD-2025-115778

Malicious code in callisto-cygnus-supervisor-blitz npm...

MAL-2025-144837 Malicious code in meissa-supervisor-markdown-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60cdc4d5317b650a261573ff13fe8a451e6e91f68730697fa7045ac908f307e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146026 Malicious code in pegasus-envconfig-wasat-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb3c8a932b15d91dfb13038e031e46cecbe14cba78be0527c74a12a035d982c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147623 Malicious code in sagitta-supervisor-publish-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de9a0ddb3ac825b2c032dd952456a12fa1dd6793f53dcdfedbc6229196f808c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148400 Malicious code in supervisor-publish-cosmos-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9568388e674b156aa64cb527778eca4e516be31d4c94ee45e60433044ec8377f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141697 Malicious code in dorado-supervisor-child-process-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3228854c092c2c2db97fc3ce38d83f267b0a435bdf30b7d446f564e17838650e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121521

Malicious code in supervisor-superagent-helmet-nuxtjs npm...

EUVD-2025-124270

Malicious code in norma-supervisor-epimetheus-aquarius npm...

MAL-2025-142250 Malicious code in eslint-supervisor-rollup-plugin-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35eaf1dd0ae02b839f771c4647f77510a80e88ff4c7236de32a826f8b817cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143529 Malicious code in ignite-supervisor-mocha-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c036900e6f404ea72aa85a4bf54d4a73318c1e65912111e0b97c5588f50e239d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142327 Malicious code in event-supervisor-eslint-config-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f9d2558669f4486f9e0526eb7585e053c2ee108448dc16a4490384a0cb5163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140046 Malicious code in blitz-hyperion-leda-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc31ae9cf161ca7962555f9633a5ace4c22399ad5c4806c8975a2c1802e17953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142225 Malicious code in eslint-plugin-apollo-supervisor-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97c4417371354dc864ac05316ad3f9ffd6bf4a85eeec03dd87dd816e428dc88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112439

Malicious code in install-eclipse-supervisor-markdown-pdf npm...

CVE-2025-63384

A vulnerability was discovered in RISC-V Rocket-Chip v1.6 and before implementation where the SRET Supervisor-mode Exception Return instruction fails to correctly transition the processor's privilege level. Instead of downgrading from Machine-mode M-mode to Supervisor-mode S-mode as specified by...

EUVD-2025-50785

A vulnerability was discovered in RISC-V Rocket-Chip v1.6 and before implementation where the SRET Supervisor-mode Exception Return instruction fails to correctly transition the processor's privilege level. Instead of downgrading from Machine-mode M-mode to Supervisor-mode S-mode as specified by...

CVE-2025-63384

A vulnerability was discovered in RISC-V Rocket-Chip v1.6 and before implementation where the SRET Supervisor-mode Exception Return instruction fails to correctly transition the processor's privilege level. Instead of downgrading from Machine-mode M-mode to Supervisor-mode S-mode as specified by...

Rocket Chip Generator 安全漏洞

Rocket Chip Generator is an open source Sysem-on-Chip design generator from CHIPS Alliance Open Source. A security vulnerability exists in Rocket Chip Generator v1.6 and earlier versions, which stems from a failure of the SRET instruction to properly convert processor privilege levels, which coul...

CVE-2025-63384

CVE-2025-63384 affects RISC-V Rocket-Chip v1.6 and earlier. The SRET instruction fails to downgrade from M-mode to S-mode as dictated by sstatus.SPP, causing a privilege retention vulnerability where execution remains in Machine mode. Impact is described as high confidentiality risk with no repor...

CVE-2025-63384

A vulnerability was discovered in RISC-V Rocket-Chip v1.6 and before implementation where the SRET Supervisor-mode Exception Return instruction fails to correctly transition the processor's privilege level. Instead of downgrading from Machine-mode M-mode to Supervisor-mode S-mode as specified by...