MAL-2025-185779 Malicious code in beta-enum-notify-view-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61bccf3f703fef5887b6554bcd18352453f796633476d23cc246ea564274a9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-bash-index-beta-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6cc75455d927ac7ec7640978a185ab90cc79761f99095952bcfbf9d20cde5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176373

Malicious code in simulate-refactor-java-route-beta npm...

EUVD-2025-176423

Malicious code in serialize-final-beta-deserialize-await npm...

EUVD-2025-180100

Malicious code in beta-key-promise-socket-file npm...

EUVD-2025-178379

Malicious code in integer-pipe-beta-orchestrate-simulate npm...

EUVD-2025-178221

Malicious code in kappa-pi-nu-beta-lambda npm...

EUVD-2025-180097

Malicious code in beta-try-omicron-orchestrate-analyze npm...

EUVD-2025-175853

Malicious code in uglify-bash-index-beta-interface npm...

EUVD-2025-179215

Malicious code in earth-visualize-abstract-beta-pipe npm...

EUVD-2025-177271

Malicious code in permission-emulate-cloud-beta-stub npm...

Malicious code in omicron-route-beta-virtualize-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1df4644462be2f6bef9258c6e7098ecbad6972699c1f806efa8e5ab8a3428a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178825

Malicious code in function-finally-beta-fast-deploy npm...

EUVD-2025-180099

Malicious code in beta-moon-fast-authorize-deploy npm...

EUVD-2025-179509

Malicious code in cron-kappa-bash-serialize-beta npm...

EUVD-2025-176695

Malicious code in report-epsilon-socket-beta-sudo npm...

MAL-2025-188421 Malicious code in omicron-route-beta-virtualize-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1df4644462be2f6bef9258c6e7098ecbad6972699c1f806efa8e5ab8a3428a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

ZenTao多款产品 安全漏洞

ZenTao Biz and others are a project management software from the Chinese company ZenTao. A security vulnerability exists in several ZenTao products, which stems from insufficient validation of the parameter account in the file /zentao/user-login.html, which could lead to an SQL injection attack...

HP Integrated Lights-Out Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2019-11983)

A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 iLO 4 earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 iLO 5 for Gen10 Servers earlier than version v1.39. This plugin only works with Tenable.ot. Please visit...

CVE-2025-64435

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.7.0-beta.0, a logic flaw in the virt-controller allows an attacker to disrupt the control over a running VMI by creating a pod with the same labels as the legitimate virt-launcher pod associated with the VMI. This can...