2850 matches found
EUVD-2025-116480
Malicious code in async-centauri-sirius-vega npm...
Malicious code in leda-async-nodejs-izar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919099f39c4c627753c0eacb2c31a393a6a92e02b8a16c383406fc50a41281d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121040
Malicious code in ultra-bootes-async-morgan npm...
MAL-2025-141264 Malicious code in cross-env-pegasus-async-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a6a5d9de5d3e6171d01a2b039e57bcc853f57222af8a5c94eaf0f922621903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143817 Malicious code in janus-meissa-async-concurrently (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8375482f6b277cc61492190443b2cfe5a3ab44b8a36fb400b592ba1fdb2a092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146179 Malicious code in phoebe-sass-loader-async-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8090a8462ed301278b5f4858f19d9f7be19c3e0895b1da7bc4e5a099f51641a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142584 Malicious code in fork-csv-standard-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207804b34c80b70376e5579f1c9e4b7c425db63c480b78e030d71008f1416272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141889 Malicious code in elara-style-loader-comet-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab4c1c4efa7b3926279345b2e9565aada7886b972c1b9b8ce7413517ab3c5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143024 Malicious code in gravity-flare-async-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afaee9c4dea8100f153b287b329c31392a468c2d17a4394f167daf28eee72e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146529 Malicious code in private-apex-async-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809989375fd7c4fee0ad26f02ee0690a7036ba01a3577306714bcb41ddf649ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146944 Malicious code in quasar-cosmiconfig-async-json (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e76bb28548534fc01c9b0261f4267dbbec430eb9d246820b1104a172a156064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Linux Distros Unpatched Vulnerability : CVE-2025-40171
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-fc: move lsop put work to nvmetfclsreqop It's possible for more than one async command to be in flight from nvmetfcsendlsreq. For each command, a tgtport...
CVE-2025-40176: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: tls: wait for pending async decryptions if tlsstrpmsghold fails Async decryption calls tlsstrpmsghold to create a clone of the input skb to hold references to the memory it uses. If we fail to allocate that clone, proceeding with...
Malicious Package
Overview read-async is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in read-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50e44ff451ef9fc81f95c35723295ddf21c4809772def9f17d454f36060ffa5 The package read-async was found to contain malicious code. Source: ghsa-malware 2425ce18f083d47fb3a3ea1f6f69939c013edff9d27960bac75e225e09d390cf Any...
EUVD-2025-50840
Malicious code in read-async npm...
MAL-2025-66547 Malicious code in read-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50e44ff451ef9fc81f95c35723295ddf21c4809772def9f17d454f36060ffa5 The package read-async was found to contain malicious code. Source: ghsa-malware 2425ce18f083d47fb3a3ea1f6f69939c013edff9d27960bac75e225e09d390cf Any...
RHSA-2025:19856 Red Hat Security Advisory: Satellite 6.15.5.6 Async Update
Bulletin has no description...