EUVD-2025-177707

Malicious code in native-callback-prettier-magellan npm...

EUVD-2025-178459

Malicious code in ignite-callback-cosmochemistry-paleobotany npm...

EUVD-2025-179899

Malicious code in callback-xanthus-astrochemistry-quantum-computing npm...

Malicious code in warp-boson-callback-supercluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95312546c36f2f246c3a72e1074b30f6d60280d986fd0cd2fc73fee683e7972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177119

Malicious code in pm2-development-postcss-callback npm...

EUVD-2025-176794

Malicious code in rate-limiter-callback-nebula-electron npm...

EUVD-2025-176416

Malicious code in server-callback-css-loader-archaeoastronomy npm...

EUVD-2025-176323

Malicious code in soap-callback-convict-middleware npm...

EUVD-2025-175657

Malicious code in warp-boson-callback-supercluster npm...

EUVD-2025-177773

Malicious code in mongodb-nodemon-callback-areology npm...

Malicious code in callback-fomalhaut-slidev-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6530e7d524ba18030b212aec51ecb2bc02efc16da675b6d3b84232396518dcf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179908

Malicious code in callback-elara-hadron-jekyll npm...

MAL-2025-186899 Malicious code in exobiology-callback-commitlint-config-angular-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d03030a05c5bd857db6811b031add8d86b357970bbd076059ac391ba964d545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178518

Malicious code in holography-antares-enif-callback npm...

EUVD-2025-179900

Malicious code in callback-uranology-fork-rigel npm...

MAL-2025-189670 Malicious code in stop-callback-wezen-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fa92762b57b343fad2ecbf79edc792490f94879bf693116bb44049f18da222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Siemens SIMATIC S7-1500 Expected Behavior Violation (CVE-2022-32221)

When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the...

CVE-2025-40132

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Prevent jump to NULL addsidecar callback In createsdwdailink check that sofend-codecinfo-addsidecar is not NULL before calling it. The original code assumed that if includesidecar is true, the codec on that...

CVE-2025-40132 ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Prevent jump to NULL addsidecar callback In createsdwdailink check that sofend-codecinfo-addsidecar is not NULL before calling it. The original code assumed that if includesidecar is true, the codec on that...

CVE-2025-40132 ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Prevent jump to NULL addsidecar callback In createsdwdailink check that sofend-codecinfo-addsidecar is not NULL before calling it. The original code assumed that if includesidecar is true, the codec on that...