EUVD-2025-55254

Malicious code in condemned-aqua-snake npm...

EUVD-2025-52544

Malicious code in pure-aqua-possum npm...

Malicious code in pure-aqua-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47094481b82d5f3a5b550ce96144c7841203251943602384c4ea545c26d10437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54726

Malicious code in eastern-aqua-whippet npm...

EUVD-2025-54855

Malicious code in distinctive-aqua-crayfish npm...

EUVD-2025-53807

Malicious code in inclined-aqua-vole npm...

MAL-2025-67864 Malicious code in dreadful-aqua-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02448f120ee0ca9d388a083c5f36a47502dde97577bcccdb293dda50f96944cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71419 Malicious code in vast-aqua-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c666e60a4f3df2b6b616bfb58c02f6c602c2fbe3d90e16bc62ddd7324bbd0916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67794 Malicious code in distinctive-aqua-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d98a6cf602be9d0b3fe467bca6cd969a9ce159190c5fc96ad9c7d11e79a587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2009-1315

Malware in sbrugna...

EUVD-2009-1714

Malware in sbrugna...

EUVD-2022-3950

Malicious code in bioql PyPI...

EUVD-2024-49933

Malicious code in bioql PyPI...

EUVD-2022-5429

Malicious code in bioql PyPI...

EUVD-2022-2199

Malicious code in bioql PyPI...

EUVD-2022-2512

Malicious code in bioql PyPI...

CVE-2025-53653

Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

The vulnerability of the Aqua Security Scanner plugin in the Jenkins automation server, related to the lack of data encryption measures, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Aqua Security Scanner plugin in the Jenkins automation server is related to the lack of data encryption measures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

GHSA-3WGG-3J4J-3F69 Jenkins Aqua Security Scanner Plugin vulnerability exposes scanner tokens

Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These tokens can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file...

Cleartext Storage of Sensitive Information

Overview org.jenkins-ci.plugins:aqua-security-scanner is a Jenkins plugin for calling the Aqua API to scan a Docker image Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information in the storage of Scanner Tokens for Aqua API in config.xml files on the...