4424 matches found
EUVD-2025-179898
Malicious code in callback-zephyr-semantic-ui-carpo npm...
EUVD-2025-177119
Malicious code in pm2-development-postcss-callback npm...
EUVD-2025-177773
Malicious code in mongodb-nodemon-callback-areology npm...
EUVD-2025-175657
Malicious code in warp-boson-callback-supercluster npm...
EUVD-2025-179899
Malicious code in callback-xanthus-astrochemistry-quantum-computing npm...
EUVD-2025-177707
Malicious code in native-callback-prettier-magellan npm...
MAL-2025-186899 Malicious code in exobiology-callback-commitlint-config-angular-slides (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d03030a05c5bd857db6811b031add8d86b357970bbd076059ac391ba964d545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189670 Malicious code in stop-callback-wezen-quark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fa92762b57b343fad2ecbf79edc792490f94879bf693116bb44049f18da222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Siemens SIMATIC S7-1500 Expected Behavior Violation (CVE-2022-32221)
When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the...
CVE-2025-40132
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Prevent jump to NULL addsidecar callback In createsdwdailink check that sofend-codecinfo-addsidecar is not NULL before calling it. The original code assumed that if includesidecar is true, the codec on that...
CVE-2025-40132 ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Prevent jump to NULL addsidecar callback In createsdwdailink check that sofend-codecinfo-addsidecar is not NULL before calling it. The original code assumed that if includesidecar is true, the codec on that...
CVE-2025-40132 ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Prevent jump to NULL addsidecar callback In createsdwdailink check that sofend-codecinfo-addsidecar is not NULL before calling it. The original code assumed that if includesidecar is true, the codec on that...
CVE-2025-40132
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Prevent jump to NULL addsidecar callback In createsdwdailink check that sofend-codecinfo-addsidecar is not NULL before calling it. The original code assumed that if includesidecar is true, the codec on that...
EUVD-2025-123779
Malicious code in phoebe-callback-javascript-sequelize npm...
EUVD-2025-115021
Malicious code in convict-rehype-callback-npm npm...
EUVD-2025-120257
Malicious code in xenos-cypress-ursa-callback npm...
EUVD-2025-115797
Malicious code in callback-pyxis-jovian-ora npm...
EUVD-2025-111635
Malicious code in local-aquarius-callback-airbnb npm...
Malicious code in jabbah-callback-lacerta-wasat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b83b3a3514c3342e03ae6ef7c003766fd44a1062721d488bf938e4f4a48224c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...