CVE-2025-31647

Uncontrolled search path for some IntelR Graphics Software before version 25.22.1502.2 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This...

CVE-2025-20614

External control of file name or path for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privileg...

CVE-2025-20050

Uncontrolled search path for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This...

CVE-2025-31937

Out-of-bounds read for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur...

CVE-2025-24838

Improper privilege management for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege...

CVE-2025-27713

Out-of-bounds write for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2025-26694

Null pointer dereference for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially...

CVE-2025-35967

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This...

CVE-2025-35971

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This...

Malicious code in teagood-manaki55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba3e4c405aa363f7bd8dcf04315528c3fef003bdce35ce7f321ec58ebfe4916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebaaf02afd0aa3e73bb5115c020b3b4ab603d8aeb116607813bc3a2178bfe4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafaru-tauhauimat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1547c22324ff7c051675d28298468880c75da7e9c04b0dd931962ac54c8b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 292c65ea6b8b41d693acf6c79ce746ac8f169e12db9da28b6497104d8175accf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147539

Malicious code in trevora-cir75 npm...

Malicious code in teagood-lokina99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42c54412ff27e68f66cc8422bfc54aea71eaa3150f2e73cde14bbd9a729365d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a7aec4895b7b8083429ada0c556c97859a543d53e2431b4ec338a16dfc70c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/gjjd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5162a82fec82292342cda066c8dbde26c551e5f0032d955f7883b9a4e5a247d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167351 Malicious code in teagood-nakamala82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf76f383dbf12b97128828eda355160a8b7e17c0723ca967d4ef15903f2fe64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d565bee875091dd9d056054670b1bce3f7e61c8748751c5505c95080973cffcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiuza-iytadut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346006a8cbfc7c16b0be7c08985763955d05e0577b1ec34a2831a4083af49517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...