MAL-2025-100777 Malicious code in complex_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d2c28a41513cf050399552ca08a084478e1526c180f4666ab9f6ef0014ae0bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64874

Malicious code in complexmothz3n npm...

Malicious code in complex_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 984b385f050c97cdacd4a13d65e56a65ea5a09b9c9954a69fe01c6df88ab560f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complex_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3595bea57bd85a5db721b7ebc7fd510e6872550eaa630fa6beefd3db40db7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64877

Malicious code in complexbarnaclez3n npm...

EUVD-2025-64872

Malicious code in complexpossumz3n npm...

MAL-2025-93679 Malicious code in complex_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cc9fa7b40688130f5b762e5d90d647132705739cd64e34e446bb09fe768353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55276

Malicious code in complex-peach-monkey npm...

EUVD-2025-55278

Malicious code in complex-gray-owl npm...

EUVD-2025-55277

Malicious code in complex-jade-tern npm...

Malicious code in complex-bronze-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f387e3115bc0703a99c80a6e8560c0a352d073a7ff02ade2b32c48d8bdafe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55279

Malicious code in complex-bronze-rat npm...

MAL-2025-67369 Malicious code in complex-blue-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc346b51b32e89fe8756cd200d91de53ef6c0e01b28cd657ec0aa4d8894030d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55280

Malicious code in complex-blue-angelfish npm...

EUVD-2025-55275

Malicious code in complex-violet-ermine npm...

EUVD-2025-55281

Malicious code in complex-black-impala npm...

EUVD-2025-48274

Malicious code in complexopossumz3n npm...

CVE-2025-12295

A weakness has been identified in D-Link DAP-2695 2.00RC13. The affected element is the function sub40C6B8 of the component Firmware Update Handler. Executing manipulation can lead to improper verification of cryptographic signature. The attack can be launched remotely. Attacks of this nature are...

JLSEC-2025-79 In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer...

In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c...

DEBIAN-CVE-2025-11683

YAML::Syck versions before 1.36 for Perl has missing null-terminators which causes out-of-bounds read and potential information disclosure Missing null terminators in token.c leads to but-of-bounds read which allows adjacent variable to be read The issue is seen with complex YAML files with a has...