EUVD-2025-180148

Malicious code in bad-info-encrypt-boolean-simple npm...

EUVD-2025-178962

Malicious code in export-bad-compress-fork-compress npm...

EUVD-2025-180143

Malicious code in bad-stub-key-fast-minify npm...

EUVD-2025-176144

Malicious code in sun-bad-assert-secure-protected npm...

EUVD-2025-176989

Malicious code in protected-reject-decrypt-bad-big npm...

EUVD-2025-180146

Malicious code in bad-key-short-sudo-resolve npm...

EUVD-2025-178449

Malicious code in import-compile-compile-bad-report npm...

MAL-2025-187660 Malicious code in kappa-nu-daemon-async-bad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b657d373edb8e61669489b5128e98ebd488496a11d5e249541214b28a780a773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40193 xtensa: simdisk: add input size check in proc_write_simdisk

In the Linux kernel, the following vulnerability has been resolved: xtensa: simdisk: add input size check in procwritesimdisk A malicious user could pass an arbitrarily bad value to memdupusernul, potentially causing kernel crash. This follows the same pattern as commit ee76746387f6 "netdevsim:...

kernel: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes A bad USB device is able to construct a service connection response message with target endpoint being ENDPOINT0 which is reserved for HTCCTRLRSVDSVC and should not be...

kernel: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes A bad USB device is able to construct a service connection response message with target endpoint being ENDPOINT0 which is reserved for HTCCTRLRSVDSVC and should not be...

MAL-2025-141262 Malicious code in cross-env-optimize-css-assets-webpack-plugin-dependencies-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f584af0f6b2d8c55e83c6ece1901ac4ceacd719853a62846ab4d14f8550a18ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74867

Malicious code in badlobstergreen-14 npm...

EUVD-2025-77705

Malicious code in badthrushz3n npm...

EUVD-2025-77706

Malicious code in badlionz3n npm...

EUVD-2025-82788

Malicious code in badparrotz3n npm...

EUVD-2025-65211

Malicious code in badbearz3n npm...

EUVD-2025-55729

Malicious code in bad-orange-roundworm npm...

EUVD-2025-55728

Malicious code in bad-violet-lobster npm...

ROS-20251111-10

Vulnerability of processsymtab function of eu-readelf component of ELF Elfutils binary modification and analysis utility is related to copying buffer without checking input data size. ELF Elfutils is related to buffer copying without checking input data size. Exploitation vulnerability could allo...