9954 matches found
EUVD-2025-178587
Malicious code in hawkingradiation-mensa-dotenv-parse-variables-inquirer npm...
EUVD-2025-176346
Malicious code in slides-install-dynamo-dotenv-parse-variables npm...
EUVD-2025-178832
Malicious code in framework-writable-dotenv-parse-variables-yonder npm...
EUVD-2025-176871
Malicious code in quantum-norma-canopus-dotenv-parse-variables npm...
EUVD-2025-180388
Malicious code in apollo-dotenv-parse-variables-stratigraphy-private npm...
MAL-2025-188778 Malicious code in postcss-loader-bootes-dotenv-parse-variables-csv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc8c8e7ddc227365def94f5bebb667a28e8286055e4184311450fd633fa2131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178139
Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables npm...
PT-2025-46904
Name of the Vulnerable Software and Affected Versions Socket Firewall versions prior to 0.15.5 Description Socket Firewall is an HTTP/HTTPS proxy server designed to enforce security policies by blocking dangerous packages. Versions of Socket Firewall prior to 0.15.5 are susceptible to arbitrary...
CVE-2025-64407
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...
CVE-2025-64407 Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...
CVE-2025-64407 Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...
CVE-2025-64407
Technical details for CVE-2025-64407 are not publicly provided in the connected documents. Available sources discuss related vulnerabilities (CVE-2024-12425/12426) and Apache OpenOffice issues, but do not specify this CVE’s affected products, root cause, or fixes.
EUVD-2025-114373
Malicious code in dotenv-parse-variables-rehype-webpack-dependencies npm...
Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aed2df30501f45d7be301a0e5be1666e00b4b3342c466d56d145e396b7a877d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120817
Malicious code in venus-figures-configstore-dotenv-parse-variables npm...
EUVD-2025-120445
Malicious code in winston-changelog-dotenv-parse-variables-parcel npm...
EUVD-2025-116595
Malicious code in apollo-elara-dotenv-parse-variables-charon npm...
EUVD-2025-121616
Malicious code in stop-zenith-auriga-dotenv-parse-variables npm...