Malicious code in dominant_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d802b431b800eb825ce13f68c09e2078b9b514e12366a1183d89e78a9a92c373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-toge46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f787c5d48dfcab425cffa372f1852d8d7200aa897ee54ec541d4d86fda51138a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126728 Malicious code in genetic_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582b07cff6761aa721f65c839d0c5c5db7bd75023a9d77d9df78d436f9abdd91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-lengko28-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3254573250927b2abb6cc5fa206c57d1ebdd21203a0e2dc141f2cdb4258485fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123956 Malicious code in vera-gepuk4-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6971e75935b707aaaad02b6ae3ba34d61d4082b457bdf4f8743d10805ed1877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123047 Malicious code in royal_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38627892b7313760a5acf5724c03f2b92edf209972aaa8b2ce701cc5a269a675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-mieayam16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19792e97a4b4b77f75edf7e8613b4f3c27f06192661889155047c42f25265ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119917 Malicious code in fadhil-tapai58-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ac3b9121dd2be3ea3032a9cfb3d68e9b528c25ba401799f2dbda996941ae6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124166 Malicious code in wati-gorengan35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1004c73d5ccf2f21d1b149c86c8cc59e0820186885465d4d435b70abe77ac2e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123639 Malicious code in tomi-kue62-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc25c582571029809e467f51c55a81e63dff1f889a061805ade01dd3a7f3eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-84345

A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API...

MAL-2025-112549 Malicious code in ade-papeda94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a435a53d73b08c7d0808b824a1072a3cbe8ffd19b1fb4d83423fb2f5b8a3fe71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116400 Malicious code in physical_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa92dc138953f308e2c0eb0185f75130727eba8085fb6f25e43de822370731fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11862

A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API...

CVE-2025-11862 Verve Asset Manager Access Control Vulnerability

A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API...

CVE-2025-11862 Verve Asset Manager Access Control Vulnerability

A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API...

CVE-2025-11862

CVE-2025-11862 : Verve Asset Manager has an access-control vulnerability enabling unauthorized read-only users to read, update, and delete users via the API. Affects the Verve Asset Manager API endpoints (and is described as a user data manipulation issue with API exposure). The CVSS 4.0 base sco...

kernel: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.

In the Linux kernel, the following vulnerability has been resolved: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. SIOCBRDELIF is passed to devioctl first and later forwarded to brioctlcall, which causes unnecessary RTNL dance and the splat below 0 under RTNL pressure. Let's say Thread A...

CVE-2025-5317

An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac BEST before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the...

MAL-2025-111643 Malicious code in acute_blackbird_lime-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f07187e0562aa868a5b145b1925efde1a3de1156ed1f48ab40c014eb819aaaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...