EUVD-2025-92733

Malicious code in classicflyz3n npm...

Malicious code in nurul-takokak22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa7e0ab23c5ede7f4848946cf5341deb97d3ab811452fc9a8c8cdda268a82d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-88178

Malicious code in usualhippopotamusz3n npm...

EUVD-2025-90947

Malicious code in iwan-rawon83-miaww npm...

EUVD-2025-92512

Malicious code in dewi-semur85-miaww npm...

EUVD-2025-89663

Malicious code in okta-dradag77-miaww npm...

EUVD-2025-91363

Malicious code in hanafi-jengkol9-miaww npm...

EUVD-2025-92155

Malicious code in erwin-sego60-miaww npm...

EUVD-2025-89423

Malicious code in progressivealligatorz3n npm...

CISO's Expert Guide To AI Supply Chain Attacks

AI-enabled supply chain attacks jumped 156% last year. Discover why traditional defenses are failing and what CISOs must do now to protect their organizations. Download the full CISO’s expert guide to AI Supply chain attacks here. TL;DR AI-enabled supply chain attacks are exploding in scale and...

Fake NPM Package With 206K Downloads Targeted GitHub for Credentials (UPDATED)

Veracode Threat Research exposed a targeted typosquatting attack on npm, where the malicious package @acitons/artifact stole GitHub tokens. Learn how this supply chain failure threatened the GitHub organisation's code...

kernel: wifi: ath12k: fix uaf in ath12k_core_init()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix uaf in ath12kcoreinit When the execution of ath12kcorehwgroupassign or ath12kcorehwgroupcreate fails, the registered notifier chain is not unregistered properly. Its memory is freed after rmmod, which may trigge...

EUVD-2025-74467

Malicious code in medicallungfishblush-7 npm...

EUVD-2025-76976

Malicious code in endlessparrotfish-appteadev npm...

EUVD-2025-75904

Malicious code in qjakal-devapptea npm...

EUVD-2025-75679

Malicious code in selfishopossum-smiletea npm...

EUVD-2025-75345

Malicious code in universalraccoon-gooddev npm...

EUVD-2025-75731

Malicious code in seblakkuah npm...

EUVD-2025-74996

Malicious code in armedmackerel-smiletea npm...

@dokja/dokja (1.1.4), above_angelfish_peach-86 (3.1.4) +249 more potentially affected by unknown CVE via dokja (1.1.4)

dokja NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dokja and may be impacted: - @dokja/dokja 1.1.4 - aboveangelfishpeach-86 3.1.4 - abundanttickmaroon-44 3.1.3 - activesnakewhite-91 3.2.4 - adverseelkblush-92 3.1.1 -...