EUVD-2025-124435

Malicious code in nightwatch-shelljs-optimize-css-assets-webpack-plugin-meissa npm...

EUVD-2025-114438

Malicious code in docusaurus-optimize-css-assets-webpack-plugin-vortex-json npm...

EUVD-2025-115528

Malicious code in ceres-telesto-bootstrap-optimize-css-assets-webpack-plugin npm...

EUVD-2025-114706

Malicious code in cypress-optimize-css-assets-webpack-plugin-pino-umbriel npm...

EUVD-2025-124059

Malicious code in optimize-css-assets-webpack-plugin-hyperion-dotenv-async npm...

EUVD-2025-123230

Malicious code in protractor-optimize-css-assets-webpack-plugin-rest-cosmos npm...

EUVD-2025-120275

Malicious code in xenon-optimize-css-assets-webpack-plugin-wezen-betelgeuse npm...

EUVD-2025-124063

Malicious code in optimize-css-assets-webpack-plugin-cli-gatsby-aether npm...

MAL-2025-145859 Malicious code in optimize-css-assets-webpack-plugin-commitizen-envconfig-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50aa2e0311402f756bc306bf743331b6111d2ad0a80567bb1f6b9af5c82adc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122132

Malicious code in sedna-request-epimetheus-optimize-css-assets-webpack-plugin npm...

EUVD-2025-124050

Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-postgres-middleware npm...

EUVD-2025-113605

Malicious code in firebase-optimize-css-assets-webpack-plugin-csv-superagent npm...

MAL-2025-145856 Malicious code in optimize-css-assets-webpack-plugin-achernar-non-blocking-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c3dcd2d7106f3ab301acd84ce92ac2fe07d3cb7896514991b57374a38f2209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122693

Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development npm...

One Signature, Multiple Payments: Demystifying and Detecting Signature Replay Vulnerabilities in Smart Contracts

Smart contracts have significantly advanced blockchain technology, and digital signatures are crucial for reliable verification of contract authority. Through signature verification, smart contracts can ensure that signers possess the required permissions, thus enhancing security and scalability...

Malicious code in middle_starfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07676c5f218e1c076b77e2ede86873483860f354d59e98ec3921a92e5df51a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76431 Malicious code in yanti-soto94-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7f7324607bee9ec8c07c13c7371c1e31b44cc6fb44fcd9f971af6e3f162f13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64486

calibre is an e-book manager. In versions 8.13.0 and prior, calibre does not validate filenames when handling binary assets in FB2 files, allowing an attacker to write arbitrary files on the filesystem when viewing or converting a malicious FictionBook file. This can be leveraged to achieve...

DEBIAN-CVE-2025-64486

calibre is an e-book manager. In versions 8.13.0 and prior, calibre does not validate filenames when handling binary assets in FB2 files, allowing an attacker to write arbitrary files on the filesystem when viewing or converting a malicious FictionBook file. This can be leveraged to achieve...

CVE-2025-64486 calibre is vulnerable to arbitrary code execution when opening FB2 files

calibre is an e-book manager. In versions 8.13.0 and prior, calibre does not validate filenames when handling binary assets in FB2 files, allowing an attacker to write arbitrary files on the filesystem when viewing or converting a malicious FictionBook file. This can be leveraged to achieve...