218 matches found
MAL-2025-69737 Malicious code in oral-black-bison (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f23a2bbed85773c9588699beee1b478fdb8da9b707da521c4d3fdbaa2f83f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-70301 Malicious code in religious-blue-bison (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97d6af21988e019151eccdd0dcd3fc90c643671a1c9978d228e5bd48d23f3d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-69184 Malicious code in live-amaranth-bison (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ecc0fb451c072269014314f8d8c030cac5d1df894a490633995bf1ce7620380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in net-gray-bison (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207d197632e8546f7623e57c730878ac33c936aa5144bb8dec19af81652339d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54194
Malicious code in functional-fuchsia-bison npm...
MAL-2025-69512 Malicious code in mute-chocolate-bison (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7343d6d5ea7a64c5236e89874baec48228d5d32ba054c8af8c4a4720cdaafdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-69605 Malicious code in net-gray-bison (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207d197632e8546f7623e57c730878ac33c936aa5144bb8dec19af81652339d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-60222
Malicious code in damagedbisonz3n npm...
EUVD-2025-49746
Malicious code in naturalbisonz3n npm...
MAL-2025-61535 Malicious code in uniform_bison_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6dfa39e2dae3876556ae4c56c3850dcc0782cc4c4278559cfa9eb4399a8fed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-61703 Malicious code in ytterbic_bison_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c5234089dfff776556a3d0f5f93dbbfd83c7ebbd1894b5c9f99ee36cc2cb29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-45461
Malicious code in rivalbisonz3n npm...
EUVD-2020-6307
Malware in sbrugna...
EUVD-2020-16975
Malware in sbrugna...
EUVD-2025-24010
Malicious code in bioql PyPI...
EUVD-2025-24007
Malicious code in bioql PyPI...
GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash). NOTE: there is a risk only if Bison is used with untrusted input, and an observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug reports were intended to show that a crash may occur in Bison itself, not that a crash may occur in code that is generated by Bison.
...
The vulnerability of the GNU Bison parser generator lies in improper restrictions on operations within the buffer memory, which allows a malicious actor to trigger a service failure.
The vulnerability of the GNU Bison parser generator is related to incorrect restrictions on operations within the buffer memory. Exploiting this vulnerability can allow an attacker to cause a service failure...