EUVD-2025-52587

Malicious code in promising-teal-spider npm...

EUVD-2025-51771

Malicious code in strict-crimson-spider npm...

Malicious code in disturbed-ivory-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 186d869e3f63a42cf3ee0d3af672c8f564d00264729eef23312b65886cb77d63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasteful-indigo-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78265be9b8cf6135279e2b3b13aa2e89603a3c020e4e9f70568e928d4348d177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56025

Malicious code in actual-amber-spider npm...

EUVD-2025-52906

Malicious code in ordinary-lavender-spider npm...

Malicious code in impossible-gold-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778e5f044e1e3148d1819488570006d7a1f616162a4dadc292e40845e2c1460e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combative-sapphire-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d766d4e7b6097c088dbbd361b614d43658cb2ef75b5a802c38b2586b2943741a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51134

Malicious code in wasteful-indigo-spider npm...

EUVD-2025-54007

Malicious code in hard-turquoise-spider npm...

EUVD-2025-59652

Malicious code in feministspiderz3n npm...

CVE-2025-13020

Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13018

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13016

Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13012

Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13025

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

CVE-2025-13022

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

CVE-2025-13014

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13024

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

CVE-2025-13013

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5...