EUVD-2025-79717

Malicious code in bigmeadowlark0xrequest npm...

EUVD-2025-65176

Malicious code in bigmarmosetz3n npm...

Malicious code in big_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af06dc79394dfe7bd4af27d1d77d056e2d8584b0fa8a731519c82aea6576eecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65174

Malicious code in bigshrimpz3n npm...

MAL-2025-93380 Malicious code in big_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d7700e0a05585378ea4693c6bce8aee6d57f068a50c0edc5fb5f21548b3a4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55686

Malicious code in big-moccasin-butterfly npm...

EUVD-2025-55688

Malicious code in big-amber-eel npm...

EUVD-2025-55687

Malicious code in big-lime-panther npm...

EUVD-2025-55689

Malicious code in big-amber-earthworm npm...

EUVD-2025-60534

Malicious code in bigstarfishz3n npm...

MAL-2025-62104 Malicious code in big_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a74675dc21174a4757e0ff0c7ff2253a18a78f84c0fd391e7551b903f286a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

angorapy (>=0.9.1 <=0.10.8), apple-hdr-heic (=0.1.0) +65 more potentially affected by CVE-2025-64183 via openexr (=3.4.12)

openexr PYPI version =3.4.12 is affected by a known vulnerability. The following packages have a transitive dependency on openexr and may be impacted: - angorapy =0.9.1, =0.5.0, =0.2.5, =0.1.0rc1, =0.0.1, =0.1.0, =0.2.1, =0.0.4, =0.1.7, =0.0.1, =0.1.1, =0.0.0, =0.0.4 and more Source cves:...

Scientists Need a Positive Vision for AI

For many in the research community, it's gotten harder to be optimistic about the impacts of artificial intelligence. As authoritarianism is rising around the world, AI-generated "slop" is overwhelming legitimate media, while AI-generated deepfakes are spreading misinformation and parroting...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989583)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989583 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: Restrict CPUBIGENDIAN to GNU as or LLVM IAS 15.x or newer Prior to LLVM 15.0.0, LLVM's...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989154)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989154 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: Restrict CPUBIGENDIAN to GNU as or LLVM IAS 15.x or newer Prior to LLVM 15.0.0, LLVM's...

Google's AI 'Big Sleep' Finds 5 New Vulnerabilities in Apple's Safari WebKit

Google's artificial intelligence AI-powered cybersecurity agent called Big Sleep has been credited by Apple for discovering as many as five different security flaws in the WebKit component used in its Safari web browser that, if successfully exploited, could result in a browser crash or memory...

Security update for iputils

This update for iputils fixes the following issues: Security fixes: CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior bsc1242300. Other bug fixes: Fixed incorrect IPV4 TTL value when using SOCKDGRAM on big endian systems bsc1243284. Patch Instructions: To...

SUSE-SU-2025:1771-1 Security update for iputils

This update for iputils fixes the following issues: Security fixes: - CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior bsc1242300. Other bug fixes: - Fixed incorrect IPV4 TTL value when using SOCKDGRAM on big endian systems bsc1243284...

EUVD-2025-37207

Malicious code in @raux/ra-react-big-calendar npm...

Serious F5 Breach

This is bad: F5, a Seattle-based maker of networking software, disclosed the breach on Wednesday. F5 said a "sophisticated" threat group working for an undisclosed nation-state government had surreptitiously and persistently dwelled in its network over a "long-term." Security researchers who have...