CVE-2025-64486

A vulnerability has been identified in Calibre. It does not validate filenames when handling binary assets in FB2 files, allowing an attacker to write arbitrary files on the filesystem when viewing or converting a malicious FictionBook file. This can be leveraged to achieve arbitrary code executi...

EUVD-2025-122162

Malicious code in sedna-command-optimize-css-assets-webpack-plugin-eslint npm...

EUVD-2025-124056

Malicious code in optimize-css-assets-webpack-plugin-magellan-grus-unuk npm...

EUVD-2025-120275

Malicious code in xenon-optimize-css-assets-webpack-plugin-wezen-betelgeuse npm...

EUVD-2025-121598

Malicious code in stream-optimize-css-assets-webpack-plugin-nodemon-pulsar npm...

EUVD-2025-115000

Malicious code in cordelia-shelljs-gulp-optimize-css-assets-webpack-plugin npm...

EUVD-2025-124064

Malicious code in optimize-css-assets-webpack-plugin-betelgeuse-commitlint-config-angular-apex npm...

EUVD-2025-121822

Malicious code in spawn-mira-canopus-optimize-css-assets-webpack-plugin npm...

Malicious code in optimize-css-assets-webpack-plugin-radiant-aquarius-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913bbf04b9d69140ecb5c9b9f40687172fc561d0617dba209fe8a7a78d5f9062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121292

Malicious code in tethys-uglify-js-optimize-css-assets-webpack-plugin-enif npm...

EUVD-2025-115589

Malicious code in celeste-optimize-css-assets-webpack-plugin-rollup-europa npm...

EUVD-2025-122245

Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin npm...

EUVD-2025-115826

Malicious code in cache-optimize-css-assets-webpack-plugin-winston-mdx npm...

EUVD-2025-114706

Malicious code in cypress-optimize-css-assets-webpack-plugin-pino-umbriel npm...

EUVD-2025-112046

Malicious code in jupiter-xanadu-optimize-css-assets-webpack-plugin-cressida npm...

EUVD-2025-120543

Malicious code in webdriverio-terser-webpack-plugin-optimize-css-assets-webpack-plugin-rimraf npm...

EUVD-2025-122132

Malicious code in sedna-request-epimetheus-optimize-css-assets-webpack-plugin npm...

EUVD-2025-121314

Malicious code in tethys-cypress-optimize-css-assets-webpack-plugin-enif npm...

EUVD-2025-124051

Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-css-loader-mysql npm...

EUVD-2025-121961

Malicious code in sirius-optimize-css-assets-webpack-plugin-auth-loglevel npm...