Malicious code in @lpdjs/firestore-repo-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614b34b1f58e1d1c7bb2affcabf4ea2cc7954cf6d6f5c389b4d535101664531d The package @lpdjs/firestore-repo-service was found to contain malicious code. Source: ghsa-malware...

Malicious code in @louisle2/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa91d639a49dce887bee0382a02ee01371c3dfe602f171d9ba450e89a43e1205 The package @louisle2/core was found to contain malicious code. Source: ghsa-malware 60cc6937b19636ed0f05e1a3272c025f2474e3767fd5c44b29da1a2750ace6b4...

Malicious code in asciitranslator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 327f54d9fbc5fbd8fbb3edc517dc19c9a8a43791a1f693db85d8e259d4c3dd37 The package asciitranslator was found to contain malicious code. Source: ghsa-malware ec7fadae6b8c223ab9f503f09922adb5c92ed520a19dde2b624c85176f4ecd5...

Malicious code in web-types-htmx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 999540b3b5a1066e399c44ecf2f220a5318cdea88dea33416c1a3c55bcf80fb7 The package web-types-htmx was found to contain malicious code. Source: ghsa-malware 07877f867a5e18001cab22b77adf1b5bf737045f63a8ba9a2471208dde03f072...

Malicious code in hope-mapboxdraw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df66ea17d715faf27f78cc71434fc12bea5684441bf51f652b2ab98a8eb2787 The package hope-mapboxdraw was found to contain malicious code. Source: ghsa-malware b7e22015802e90e30eb1ecbc96b04e60f72c743f0a41567bbf6259b9b375afb...

Malicious code in package-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1888e34e329bc0ea8f84900de1b8ac52cf5271deb84547900790be3335b0d3e4 The package package-tester was found to contain malicious code. Source: ghsa-malware 1cd7a624ca6e7cb7928904d72a30bb889766f3c6009a09fb20758a0a29b56255...

Malicious code in composite-reducer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eecfe869a6cc75f59e734412ec583d6bb95ddaab6b45c9c22526ba7b556e004 The package composite-reducer was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198996

Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability...

Malicious code in tenacious-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61051d9fdf4393e5d5b5336a35ce010a5bd613ab5e8c9b1f45c9c3a409f365c5 The package tenacious-fetch was found to contain malicious code. Source: ghsa-malware 0c44fc9d1c7099876e590cd69eb0d5ff3928dcc439cfe74cce255584a3455cf...

Malicious code in tiaan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eec9aed3f08840a4f5787d8e5edb18c097459657ba29ca488daae2047709701 The package tiaan was found to contain malicious code. Source: ghsa-malware 0135c9cc2fe2d3112342fbb4e91dee9f30647a8d8bc93c0453991d8c51f4710e Any...

CVE-2025-48510

Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability...

CVE-2025-29933

Improper input validation within AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service...

CVE-2025-29933

Improper input validation within AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service...

Malicious code in upload-to-play-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f86113dded695e7f899fe12b243d559d7cb4ddf1f6d3d67aa8318c07ed646d The package upload-to-play-store was found to contain malicious code. Source: ghsa-malware...

Malicious code in url-encode-decode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ce07aaa237eff3cc95c7bb560f4096191d2d5328de45f176f3f8662ca7cd34 The package url-encode-decode was found to contain malicious code. Source: ghsa-malware...

CVE-2025-48510

CVE-2025-48510 concerns AMD uProf, where an improper return value mishandling in a component of the AMD μProf tool can allow a local attacker to bypass KSLR, potentially compromising confidentiality or availability. The publicly cited sources describe a local-access vulnerability affecting uProf;...

CVE-2025-64325

Emby Server is a personal media server. Prior to version 4.8.1.0 and prior to Beta version 4.9.0.0-beta, a malicious user can send an authentication request with a manipulated X-Emby-Client value, which gets added to the devices section of the admin dashboard without sanitization. This issue has...

The hidden costs of illegal streaming and modded Amazon Fire TV Sticks

Ahead of the holiday season, people who have bought cheap Amazon Fire TV Sticks or similar devices online should be aware that some of them could let cybercriminals access personal data, bank accounts, and even steal money. BeStreamWise, a UK initiative established to counter illegal streaming,...

Malicious code in expo-audio-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab638e9e692037cc0b74ba589ba0f3986462fcf5310a6ba4418a01fb08c6866 The package expo-audio-session was found to contain malicious code. Source: ghsa-malware...

Malicious code in @quick-start-soft/quick-git-clean-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577d17cd2429a5652e40b47820dcf0d2effeaf1de1762f1ee7c8b3c14eeb7cb3 The package @quick-start-soft/quick-git-clean-markdown was found to contain malicious code. Source: ghsa-malware...