14842 matches found
EUVD-2025-179602
Malicious code in config-regulus-auth-ophiuchus npm...
EUVD-2025-175493
Malicious code in xerxes-auth-jekyll-ionosphere npm...
MAL-2025-190383 Malicious code in xerxes-auth-jekyll-ionosphere (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ad4f9df284c5088fa33be03291602f134c74a08bde68bd1d24c3220134e5cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175439
Malicious code in yonder-less-loader-ini-auth npm...
CVE-2025-64517
sudo-rs (Rust implementation of sudo) is affected by CVE-2025-64517. Versions prior to 0.2.10 incorrectly recorded the invoking user’s UID in the authentication timestamp when Defaults targetpw/rootpw are enabled, which could allow a highly-privileged user to run commands as other accounts using ...
CVE-2025-40187 net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctpdisposition sctpsfdo51Dce If newasoc-peer.adaptationind=0 and sctpulpeventmakeauthkey=0 and sctpulpeventmakeauthkey returns 0, then the variable aiev remains zero and the zero will be...
CVE-2025-63666
Tenda AC15 v15.03.05.18multi issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suffix as the session identifier. An attacker with network access or the ability to run JS in a victim browser can steal the cookie and replay it to acce...
CVE-2025-40129 sunrpc: fix null pointer dereference on zero-length checksum
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...
MAL-2025-147195 Malicious code in relay-auth-cassini-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf7a75cf1af94a450e995779c3a4f00f61ffd14df9177e7fd4aea774699e5e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120938
Malicious code in update-blitz-karma-auth npm...
EUVD-2025-121862
Malicious code in socketio-rollup-plugin-vuetify-auth npm...
EUVD-2025-121257
Malicious code in titan-auth-websockets-algol npm...
EUVD-2025-123168
Malicious code in public-auth-dotenv-parse-variables-prettier-stylelint npm...
EUVD-2025-116386
Malicious code in auth-await-vortex-lynx npm...
Malicious code in draco-auth-resolvers-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e01a1e333d58856b3ce23766018ec3198d0aa4fc6404f150f0c457c256b1d104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rigel-module-ariel-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5430b6080ec3b26d7c4d27ebfc869276db25cfcba262c4909bdcdd3fc72261c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112982
Malicious code in halley-auth-vega-eslint-plugin npm...
EUVD-2025-113743
Malicious code in express-auth-registry-markdownlint npm...