20436 matches found
EUVD-2025-176434
Malicious code in semantic-ui-redis-dendrochronology-run-script npm...
EUVD-2025-177330
Malicious code in parallax-chakra-ui-cybernetics-unuk npm...
EUVD-2025-177858
Malicious code in meteor-geochronology-element-ui-polaris npm...
EUVD-2025-178238
Malicious code in jwt-antares-chakra-ui-andromeda npm...
Malicious code in chakra-ui-ethology-biomimicry-superflare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec1a6bd4839590111dd4aee2301174b7baaaf80bc633899c529eda7de74071c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178864
Malicious code in fork-eslint-slidev-chakra-ui npm...
EUVD-2025-177076
Malicious code in prettier-oberon-unuk-semantic-ui npm...
EUVD-2025-180524
Malicious code in ablation-semantic-ui-readable-xerxes npm...
EUVD-2025-179167
Malicious code in element-ui-nconf-oauth-webpack npm...
MAL-2025-189810 Malicious code in tardigrade-leda-jest-chakra-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc10d3011c67ac3227ac1cca651f3336c62b6433d148e3e9eb1973f82c03c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186093 Malicious code in chakra-ui-test-quark-astrophysics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7da34d62a5c8298da9cb0398d30b6ec22a9f5f88682ffbbef975d1fdeff375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
PT-2025-46789
Name of the Vulnerable Software and Affected Versions Nero BackItUp versions 2019 through 2025 Description Nero BackItUp contains a path parsing and user interface rendering flaw. This flaw, combined with how Windows handles file execution, can allow an attacker to run arbitrary code when a user...
Linux Distros Unpatched Vulnerability : CVE-2025-12906
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page...
Malicious code in oloc-uyg-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83657f24b6cb0405a7d555c8808dff22deb015349084f29cd35d418d6993a13a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-184728 Malicious code in oloc-uyg-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83657f24b6cb0405a7d555c8808dff22deb015349084f29cd35d418d6993a13a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in saku-aiaku-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5bac5d100e6824561d16871c75ec8d74fe8eb8685ef9166db0b3eab68737c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-12911
Inappropriate implementation in Permissions in Google Chrome allowed a remote attacker to perform UI spoofing via a crafted HTML page...
CVE-2025-12906
Inappropriate implementation in Permissions in Google Chrome allowed a remote attacker to perform UI spoofing via a crafted HTML page...