3973 matches found
EUVD-2025-176623
Malicious code in robotics-callback-vulcan-html-webpack-plugin npm...
EUVD-2025-177707
Malicious code in native-callback-prettier-magellan npm...
EUVD-2025-179899
Malicious code in callback-xanthus-astrochemistry-quantum-computing npm...
EUVD-2025-179902
Malicious code in callback-typeorm-venus-umbriel npm...
EUVD-2025-179900
Malicious code in callback-uranology-fork-rigel npm...
MAL-2025-186899 Malicious code in exobiology-callback-commitlint-config-angular-slides (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d03030a05c5bd857db6811b031add8d86b357970bbd076059ac391ba964d545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Siemens SIMATIC S7-1500 Expected Behavior Violation (CVE-2022-32221)
When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the...
CVE-2025-40132
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Prevent jump to NULL addsidecar callback In createsdwdailink check that sofend-codecinfo-addsidecar is not NULL before calling it. The original code assumed that if includesidecar is true, the codec on that...
CVE-2025-40132 ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Prevent jump to NULL addsidecar callback In createsdwdailink check that sofend-codecinfo-addsidecar is not NULL before calling it. The original code assumed that if includesidecar is true, the codec on that...
CVE-2025-40132 ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Prevent jump to NULL addsidecar callback In createsdwdailink check that sofend-codecinfo-addsidecar is not NULL before calling it. The original code assumed that if includesidecar is true, the codec on that...
CVE-2025-40132
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Prevent jump to NULL addsidecar callback In createsdwdailink check that sofend-codecinfo-addsidecar is not NULL before calling it. The original code assumed that if includesidecar is true, the codec on that...
EUVD-2025-112838
Malicious code in hercules-ceres-jest-callback npm...
Malicious code in callback-bellatrix-dotenv-safe-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e86a7248a8eb2b1c9dcf387615c6691ab9242e4d8847479817c6adc571471ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112093
Malicious code in juno-callback-pegasus-xanadu npm...
EUVD-2025-115667
Malicious code in carpo-frontend-callback-gacrux npm...
EUVD-2025-115808
Malicious code in callback-centauri-enif-zephyr npm...
Malicious code in callback-venus-flare-charon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc23af055cefad148c2cbf98683998b9525982e272f70c25fcb1f3cf400a4b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115804
Malicious code in callback-ora-perseus-sadr npm...
Malicious code in xanadu-callback-request-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cf5680828ccf264b0c7c676df6028edd1e2c4f2e5ca2153794fe92a09f8f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in callback-run-script-html-webpack-plugin-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281a3cc4cd04277d76318a794fe020a7ea9edc9d4d5148a26b7f40fcbf27f72a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...