MAL-2025-186672 Malicious code in easy-link-authorize-simple-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265547bf1390cb037550762c5d301a6413a77ea318a92378edf2e5eca552e38d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179374

Malicious code in decrypt-import-info-optimize-authorize npm...

EUVD-2025-180206

Malicious code in authorize-omega-earth-abstract-assert npm...

EUVD-2025-180207

Malicious code in authorize-node-slow-stub-daemon npm...

EUVD-2025-180312

Malicious code in assert-analyze-authorize-awk-eta npm...

EUVD-2025-178196

Malicious code in key-static-authorize-authenticate-quick npm...

EUVD-2025-180212

Malicious code in authorize-float-signal-string-table npm...

EUVD-2025-180211

Malicious code in authorize-grid-table-cat-fast npm...

EUVD-2025-176085

Malicious code in table-authorize-authenticate-assert-pi npm...

EUVD-2025-177499

Malicious code in object-authorize-array-cluster-encrypt npm...

EUVD-2025-178431

Malicious code in index-gamma-authorize-deploy-async npm...

MAL-2025-187281 Malicious code in hash-authorize-sanitize-signal-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6036f529790af1d972ea5481f35974ed1ddef51980d2dfd257f1206670838669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179721

Malicious code in class-secure-function-transpile-authorize npm...

Medium: cups

Issue Overview: A flaw was found in CUPS, a widely used printing service on Linux and UNIX-like systems. The issue arises when authentication is configured to use a method other than Basic, but the attacker sends an HTTP request with a Basic authentication header. Due to improper validation in th...

EUVD-2006-4255

Malware in sbrugna...

EUVD-2022-41770

Malicious code in bioql PyPI...

EUVD-2025-28053

Malicious code in bioql PyPI...

cups: Authentication Bypass in CUPS Authorization Handling

A flaw was found in CUPS, a widely used printing service on Linux and UNIX-like systems. The issue arises when authentication is configured to use a method other than Basic, but the attacker sends an HTTP request with a Basic authentication header. Due to improper validation in the cupsdAuthorize...

Portábilis i-Educar Authorization Issues Vulnerability

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. Portábilis i-Educar suffers from an authorization issue vulnerability, which can be exploited by an attacker to improperly authorize...

CVE-2025-41248 CVE-2025-41248: Spring Security authorization bypass for method security annotations on parameterized types

The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue when using @PreAuthorize and other method security annotations, resulting in an authorization...