EUVD-2025-79848

Malicious code in aggregateratreplicateautomation npm...

Malicious code in aggregate_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc5789a80e040d204966d33b0e43dbfc2feb55d15c65d186a6c7a9bbbed5896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-83002

Malicious code in aggregatelampreyz3n npm...

MAL-2025-99242 Malicious code in aggregate_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a70498975317c18e1cc28d5a5ad8abe792e5f1e3d73546d7976aeb4328183c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93170 Malicious code in aggregate_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123e17f0bf8e61e1ddc748b6c68f48d7ded01664c70afa4b590dded265a1830a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65386

Malicious code in aggregateminnowz3n npm...

EUVD-2025-65384

Malicious code in aggregateweaselz3n npm...

EUVD-2025-65385

Malicious code in aggregatesailfishz3n npm...

MAL-2025-93168 Malicious code in aggregate_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f3cbaf3b8ae816e2db3e00e625d46f4096baa8f62081f15b0132c884c419e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggregate-gold-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2132e283d5543a65f9f6093851b4f7522ad852f3745d713de808d9fbf117d072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55951

Malicious code in aggregate-gold-koala npm...

EUVD-2025-55950

Malicious code in aggregate-scarlet-reindeer npm...

MAL-2025-66698 Malicious code in aggregate-gold-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2132e283d5543a65f9f6093851b4f7522ad852f3745d713de808d9fbf117d072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59942 Malicious code in aggregate_peacock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488e6ca0378529f927c2e4d3f7864ecf8dadb20d1eb8200422f45cdb38cfc110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50730

Malicious code in aggregateelkz3n npm...

EUVD-2025-50728

Malicious code in aggregatemeerkatz3n npm...

ROS-20251106-04

Vulnerability of django.utils.archive.extract function of Django web application software platform is related to errors in the relative directory path handling mechanism. Exploitation of the vulnerability could allow a remote attacker to bypass security restrictions. Vulnerability in...

PT-2025-44277

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s sch qfq scheduler within the agg dequeue function net/sched/sch qfq.c. A null dereference could occur when cl-qdisc-ops-peekcl-qdisc returns NULL,...

SUSE CVE-2022-50560

In the Linux kernel, the following vulnerability has been resolved: drm/meson: explicitly remove aggregate driver at module unload time Because componentmasterdel wasn't being called when unloading the mesondrm module, the aggregate device would linger forever in the global aggregatedevices list...

CVE-2025-34155

Tibbo AggreGate Network Manager 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based on whether a supplied username exists or not, allowing an unauthenticated remote attacker to infer valid account identifiers. This can...