Malicious code in slidev-nightwatch-uninstall-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80829097b2716b4af04bc74ad7affacacf4db819ea009dfc6f652948ba2ad69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120966

Malicious code in uninstall-octans-procyon-soap npm...

MAL-2025-144569 Malicious code in loopback-uninstall-europa-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4244f6505f7c45e72bf30aca99770c0cc5832f3159ed307e19d993b30c5af9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121914

Malicious code in slidev-nightwatch-uninstall-xanthus npm...

EUVD-2025-122312

Malicious code in sagitta-postcss-uninstall-delphinus npm...

EUVD-2025-123196

Malicious code in proxima-oberon-magellan-uninstall npm...

Malicious code in loopback-uninstall-europa-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4244f6505f7c45e72bf30aca99770c0cc5832f3159ed307e19d993b30c5af9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-loopback-uninstall-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e158529ae4b1d9cd15ea986ffb47caae4298f787e4f49028d11d8a46692983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111546

Malicious code in loopback-uninstall-europa-vulcan npm...

EUVD-2025-121152

Malicious code in transform-uninstall-octans-mui npm...

CVE-2025-43079

The Qualys Cloud Agent included a bundled uninstall script qagentuninstall.sh, specific to Mac and Linux supported versions that invoked multiple system commands without using absolute paths and without sanitizing the $PATH environment. If the uninstall script is executed with elevated privileges...

CVE-2025-56503

An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate privileges to Administrator via replacing the uninstall file with a crafted binary in the installation folder. NOTE: this is disputed by the Supplier because replacing the...

EUVD-2025-74033

An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac BEST before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the...

CVE-2025-5317

An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac BEST before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the...

CVE-2025-5317

An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac BEST before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the...

CVE-2025-5317

Bitdefender Endpoint Security Tools for Mac (BEST) before version 7.20.52.200087 contains an improper access restriction in a critical folder, enabling local users with administrative privileges (sudo) to bypass uninstall password protection and manually remove the application directory (/Applica...

CVE-2025-5317 Improper access restriction to critical folder in Bitdefender Endpoint Security Tools for Mac

An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac BEST before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the...

CVE-2025-5317 Improper access restriction to critical folder in Bitdefender Endpoint Security Tools for Mac

An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac BEST before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the...

Bitdefender Endpoint Security Tool 安全漏洞

Bitdefender Endpoint Security Tool is an endpoint security management tool from the Romanian company Bitdefender. A security vulnerability exists in versions prior to Bitdefender Endpoint Security Tool 7.20.52.200087, which stems from improperly restricting folder access and could allow a...

PT-2025-46315

Name of the Vulnerable Software and Affected Versions Bitdefender Endpoint Security Tools for Mac BEST versions prior to 7.20.52.200087 Description A configuration issue in Bitdefender Endpoint Security Tools for Mac BEST allows local users with administrative privileges to bypass the uninstall...