MAL-2025-155258 Malicious code in flight-danger-fanthomia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644c828982141928f5b9d2f973e1ec9fcbd632302e10cfbaea5c12fdd3db0203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155255 Malicious code in flight-danger-fant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61777dc5f83532b414c9c1698d29178a943835a86a40682a9e1aabf5d08c25b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-danger-fanthom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be882fd01b919c51643da2203626f71a1103653d37a1f471a4ac8f29a91ccb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167114 Malicious code in teagood-manaki48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c78c8308073e1f4930dfe085810f350c81465af1fb5ae270585a38fcd279ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2005-3380

Malware in sbrugna...

kernel: smb: client: fix use-after-free in cifs_oplock_break

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifsoplockbreak A race condition can occur in cifsoplockbreak leading to a use-after-free of the cinode structure when unmounting: cifsoplockbreak cifsFileInfoputcfile cifsFileInfoputfinal...

EUVD-2022-38942

Malicious code in bioql PyPI...

Avoid Using the root User to Access the System Locally

Users with the root permission can access all Linux resources. If the root user is used to log in to the Linux OS to perform operations, there are many potential security risks. To avoid the risks, do not use the root user to log in to the Linux OS. If necessary, indirectly use the root user...

Malicious code in slabs-birthday-danger (npm)

The package slabs-birthday-danger was found to contain malicious code...

MAL-2025-46086 Malicious code in slabs-birthday-danger (npm)

The package slabs-birthday-danger was found to contain malicious code...

Modern vehicle cybersecurity trends

Modern vehicles are transforming into full-fledged digital devices that offer a multitude of features, from common smartphone-like conveniences to complex intelligent systems and services designed to keep everyone on the road safe. However, this digitalization, while aimed at improving comfort an...

Malicious code in sanitize-easy-sigma-user-execute (npm)

The package sanitize-easy-sigma-user-execute was found to contain malicious code...

Malicious code in vnte2 (npm)

The package vnte2 was found to contain malicious code...

Malicious code in @zalastax/nolb-m0 (npm)

The package @zalastax/nolb-m0 was found to contain malicious code...

MAL-2025-34196 Malicious code in super-private-danger (npm)

The package super-private-danger was found to contain malicious code...

Malicious code in @zalastax/nolb-osb (npm)

The package @zalastax/nolb-osb was found to contain malicious code...

Malicious code in super-private-danger (npm)

The package super-private-danger was found to contain malicious code...

Malicious code in test-mlw2-amain-ataxy (npm)

The package test-mlw2-amain-ataxy was found to contain malicious code...

CVE-2023-51421

Unrestricted Upload of File with Dangerous Type vulnerability in Soft8Soft LLC Verge3D Publishing and E-Commerce.This issue affects Verge3D Publishing and E-Commerce: from n/a through 4.5.2...

CVE-2025-4538 kkFileView fileUpload unrestricted upload

A vulnerability was found in kkFileView 4.4.0. It has been classified as critical. This affects an unknown part of the file /fileUpload. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...