MAL-2025-119917 Malicious code in fadhil-tapai58-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ac3b9121dd2be3ea3032a9cfb3d68e9b528c25ba401799f2dbda996941ae6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-84345

A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API...

MAL-2025-112549 Malicious code in ade-papeda94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a435a53d73b08c7d0808b824a1072a3cbe8ffd19b1fb4d83423fb2f5b8a3fe71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116400 Malicious code in physical_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa92dc138953f308e2c0eb0185f75130727eba8085fb6f25e43de822370731fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11862

A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API...

CVE-2025-11862 Verve Asset Manager Access Control Vulnerability

A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API...

CVE-2025-11862 Verve Asset Manager Access Control Vulnerability

A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API...

CVE-2025-11862

CVE-2025-11862 : Verve Asset Manager has an access-control vulnerability enabling unauthorized read-only users to read, update, and delete users via the API. Affects the Verve Asset Manager API endpoints (and is described as a user data manipulation issue with API exposure). The CVSS 4.0 base sco...

kernel: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.

In the Linux kernel, the following vulnerability has been resolved: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. SIOCBRDELIF is passed to devioctl first and later forwarded to brioctlcall, which causes unnecessary RTNL dance and the splat below 0 under RTNL pressure. Let's say Thread A...

CVE-2025-5317

An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac BEST before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the...

MAL-2025-111643 Malicious code in acute_blackbird_lime-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f07187e0562aa868a5b145b1925efde1a3de1156ed1f48ab40c014eb819aaaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101861 Malicious code in easy_carp-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb4bfe7f4a0395943ec95e05fb2ef6b49e39ec6464127fde6009ef33fadc632a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106873 Malicious code in overwhelming_opossum-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9175e0cf10f5ee62178cd6e1956173cd1c9a2e1ee08e0d3838a0e891180fd199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quarrelsome_salmon_pink-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76101ec9020e064849bd6811f8ab88cd98420c4ab6695970f4be9ec60187dfd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in notable_swordfish_coral-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5544001be2a29a5176310fcc37f348d8e1ba8fcea6637b1b02885795986fef95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106814 Malicious code in oswaldo-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1d9207f7407ffc49738b413590bebb716d8b739588849ed71bfb64dec41465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joint_primate_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4c86233f93da54de93da21ed21177c5f08f3ed58254190da41ba7f50c37b1ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106316 Malicious code in nina-jamblang31-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f0938059ada4956c4e45f6230db27f5b8d788d83b4ae01f67801488d7d48092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100149 Malicious code in budi-getas10-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5b22439fefaac8448abe0dc8946923fe726b6341a44914790ef38064498e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104101 Malicious code in indah-donat64-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44b4b0afc8e485dd477c15e999de21bbb912c40fc0fda08a9bbf7ffd12113f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...