Malicious code in frail_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2afa97c58d82c6715c16e724a12a88adcbcf45d129f5b71ad79fad95773f9ee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50740

Malicious code in adorableduckz3n npm...

Malicious code in motionless_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4db7205efa5f541252570968e7ffee944a44c6d5b45dcccde75bed2e422b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-45347

Malicious code in scornfulduckz3n npm...

EUVD-2025-46504

Malicious code in magicduckz3n npm...

EUVD-2025-45184

Malicious code in stupidduckz3n npm...

EUVD-2022-1920

Malicious code in bioql PyPI...

EUVD-2022-3225

Malicious code in bioql PyPI...

EUVD-2025-19096

Malicious code in bioql PyPI...

EUVD-2022-2866

Malicious code in bioql PyPI...

EUVD-2022-3630

Malicious code in bioql PyPI...

EUVD-2022-52233

Malicious code in bioql PyPI...

EUVD-2025-19095

Malicious code in bioql PyPI...

Malicious code in curve-duck-possible (npm)

The package curve-duck-possible was found to contain malicious code...

MAL-2025-43916 Malicious code in curve-duck-possible (npm)

The package curve-duck-possible was found to contain malicious code...

CVE-2025-41255

Cyberduck and Mountain Duck improperly handle TLS certificate pinning for untrusted certificates e.g., self-signed, unnecessarily installing it to the Windows Certificate Store of the current user without any restrictions. This issue affects Cyberduck through 9.1.6 and Mountain Duck through 4.17....

CVE-2025-41256

Cyberduck and Mountain Duck improper handle TLS certificate pinning for untrusted certificates e.g., self-signed, since the certificate fingerprint is stored as SHA-1, although SHA-1 is considered weak. This issue affects Cyberduck: through 9.1.6; Mountain Duck: through 4.17.5...

CVE-2025-41256

Cyberduck and Mountain Duck improper handle TLS certificate pinning for untrusted certificates e.g., self-signed, since the certificate fingerprint is stored as SHA-1, although SHA-1 is considered weak. This issue affects Cyberduck: through 9.1.6; Mountain Duck: through 4.17.5...

CVE-2025-41255

Cyberduck and Mountain Duck improperly handle TLS certificate pinning for untrusted certificates e.g., self-signed, unnecessarily installing it to the Windows Certificate Store of the current user without any restrictions. This issue affects Cyberduck through 9.1.6 and Mountain Duck through 4.17....

CVE-2025-41255 Cyberduck and Mountain Duck - Improper Certificate Store Handling

Cyberduck and Mountain Duck improperly handle TLS certificate pinning for untrusted certificates e.g., self-signed, unnecessarily installing it to the Windows Certificate Store of the current user without any restrictions. This issue affects Cyberduck through 9.1.6 and Mountain Duck through 4.17....