CVE-2025-12049: Missing Authentication for Critical Function

Missing Authentication for Critical Function vulnerability in Sharp Display Solutions Media Player MP-01 All Verisons allows a attacker may access to the web interface of the affected product without authentication and change settings or perform other operations, and deliver content from the...

Cross Site Scripting (XSS)

code16/sharp is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper input validation and output encoding in src/Form/Fields/SharpFormUploadField.php, which allows an attacker to inject and execute arbitrary malicious scripts in a victim’s browser...

MAL-2025-191490 Malicious code in com.unity.sharp-zip-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cedde339d72e05699d5f33d7c16779f926f419baded72d7cd78d2610395cc807 The package com.unity.sharp-zip-lib was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199914

Malicious code in com.unity.sharp-zip-lib npm...

Malicious code in sharp_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f947cfae8aa7b2037423640fdcf494b7d77f327cfef71a432125a621fcc50f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-88861

Malicious code in sharpjunglefowlz3n npm...

EUVD-2025-88862

Malicious code in sharpdogz3n npm...

EUVD-2025-78327

Malicious code in sharpaardvarkz3n npm...

EUVD-2025-78326

Malicious code in sharpmeadowlarkz3n npm...

EUVD-2025-73732

Malicious code in sharpcephalopodz3n npm...

EUVD-2025-73731

Malicious code in sharpkoirequirement npm...

EUVD-2025-66777

Malicious code in sharpchinchillaz3n npm...

EUVD-2025-52065

Malicious code in sharp-violet-gayal npm...

EUVD-2025-52072

Malicious code in sharp-amethyst-sturgeon npm...

EUVD-2025-52064

Malicious code in sharp-yellow-marmot npm...

EUVD-2025-52068

Malicious code in sharp-peach-wildfowl npm...

EUVD-2025-52070

Malicious code in sharp-fuchsia-heron npm...

MAL-2025-70581 Malicious code in sharp-peach-wildfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed8f7bdd28dac7d699d6fd09dd2351d371ce322df0ac941b1941b7588ae0889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70578 Malicious code in sharp-blue-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e491289e9e993777324d98d6e54f16641c3a614a43121e78fe653bc686f71f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sharp-sapphire-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43936cfd8e6e059af36b9d395086329b3dcbfc80299dc7635c46f862d36c9085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...