MAL-2025-67721 Malicious code in dependent-tomato-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd3b5ebeeb8c62f78a0ddc7b4e5a3a328c3d188ec0b1c35af5fd387e7764eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67717 Malicious code in dependent-blue-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2998ddd679fbb12ae42986becddb2dec3bece27a444f927a873f13c8a35e6850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54928

Malicious code in dependent-tomato-gopher npm...

Malicious code in dependent-emerald-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74bd97e6eaff9109ac6e890cdc6269f49f121c0b5dbc516cae2e998eeaeb752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60211

Malicious code in dependenttakinz3n npm...

Malicious code in dependent_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e101b09937fa03881cd5679582bf5dcfedbf2b27e25aa29439f08ccfa5bd3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50408

Malicious code in dependentbarnaclez3n npm...

adpred (=1.3.2), bacpipe (>=1.2.0 <=1.3.2.dev0) +14 more potentially affected by CVE-2025-12060 +1 more via keras (>=3.0.0 <=3.11.3)

keras PYPI version =3.0.0, =1.2.0, =0.1.0, =0.0.4, =0.4.7, =1.0.3, =0.0.28, =0.2.0, =2.4.0, =0.1.0, =0.1.1, =1.1.0, =1.10.0 and more Source cves: CVE-2025-12060, CVE-2025-4517 Source advisory: SNYK:PYTHON-KERAS-13786416...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0 <=0.7.0), com.charlyghislain.keycloak:keycloak-importexport (>=21.0.0 <=23.0.1) +135 more potentially affected by CVE-2025-11429 via org.keycloak:keycloak-services (>=1.0-alpha-1 <=26.2.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =21.0.0, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.0.1, =1.0.2 - com.kleegroup.accelerator:accelerator-security-keycloakmfa =1.0.1 and more Source cves: CVE-2025-11429 Source advisory:...

UBUNTU-CVE-2023-53706

In the Linux kernel, the following vulnerability has been resolved: mm/vmemmap/devdax: fix kernel crash when probing devdax devices commit 4917f55b4ef9 "mm/sparse-vmemmap: improve memory savings for compound devmaps" added support for using optimized vmmemap for devdax devices. But how vmemmap...

CVE-2025-62360

CVE-2025-62360 – WeGIA SQL Injection : An SQL injection flaw exists in WeGIA versions prior to 3.5.1 in the endpoint /html/funcionario/dependente_documento.php via the id_dependente parameter. The vulnerability permits attackers to execute arbitrary SQL commands, compromising database confidentia...

agentics-py (>=0.0.0 <=0.0.5), agilerl (>=2.3.5 <=2.4.1.dev1) +16 more potentially affected by CVE-2025-59425 via vllm (>=0.10.0 <=0.10.2)

vllm PYPI version =0.10.0, =0.0.0, =2.3.5, =0.1.0, =1.0.1rc1, =0.0.4, =0.1.5, =1.0.0, =0.2.4, =0.1.1, =0.1.2, =0.1.2, =0.1.0, =0.1.2 and more Source cves: CVE-2025-59425 Source advisory: OSV:GHSA-WR9H-G72X-MWHM...

EUVD-2008-3186

Malware in sbrugna...

EUVD-2007-3512

Malware in sbrugna...

EUVD-2007-3847

Malware in sbrugna...

EUVD-2014-0197

Malware in sbrugna...

EUVD-2009-3259

Malware in sbrugna...

EUVD-2007-3624

Malware in sbrugna...

EUVD-2009-2710

Malware in sbrugna...

EUVD-2008-5877

Malware in sbrugna...