CVE-2025-24299

Intel CIP software prior to version WIN_DCA_2.4.0.11001 has an input validation error in Ring 3: User Applications that may allow an escalation of privilege. An unprivileged adversary with an authenticated user and low attack complexity could exploit this, potentially over the network, to impact ...

DEBIAN-CVE-2025-13020

Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-11697

creationtimestamp| type| source ---|---|--- 2025-11-11 16:13:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ejqkfm362x 2025-11-11 17:41:16+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5eomab2j2z2 2025-11-11 18:10:19+00:00| seen|...

EUVD-2025-92701

Malicious code in commonbasiliskz3n npm...

MAL-2025-113183 Malicious code in common_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270bf809cfa32b7fa6595fd5b47af0722a34055655fd43f6f4c824412c4c60fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100720 Malicious code in common_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8ebd43c1eb20b2c079581955cd9f86a036523e2f77c0f1e939cda7e6f17dc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79598

Malicious code in commongalliformz3n npm...

MAL-2025-100724 Malicious code in common_woodpecker_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f5e662de13ab10d957610060fe4fbcb3d545029c40d416ba91691026cbe644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82446

Malicious code in commonmarmoset0xrequest npm...

EUVD-2025-71640

Malicious code in commonmolluskz3n npm...

EUVD-2025-64902

Malicious code in commonzebraz3n npm...

Malicious code in common_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7455320a8de443c6b454b1be8bbddf048eb695c2ac31051d3617379b8ef0f20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64903

Malicious code in commonmongoosez3n npm...

MAL-2025-84209 Malicious code in common_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3303139183d8764cab066d0e1b685ff3baa10e36d00493a22d91a1959bd9b8d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3303139183d8764cab066d0e1b685ff3baa10e36d00493a22d91a1959bd9b8d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-86702

Malicious code in commonmastodonz3n npm...

Malicious code in common-scarlet-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ec4e0ef4dffcb3c2477543413de5314f165cdd547db58990ed85a53f0e36b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55318

Malicious code in common-scarlet-gull npm...

EUVD-2025-55321

Malicious code in common-crimson-booby npm...

MAL-2025-67330 Malicious code in common-red-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753faff89b4f300426746bc70b549687722edd1f4875a2baf6da599de95a4dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...