849 matches found
CVE-2025-64345 Wasmtime provides unsound API access to a WebAssembly shared linear memory
Wasmtime is a runtime for WebAssembly. Prior to version 38.0.4, 37.0.3, 36.0.3, and 24.0.5, Wasmtime's Rust embedder API contains an unsound interaction where a WebAssembly shared linear memory could be viewed as a type which provides safe access to the host Rust to the contents of the linear...
PT-2025-46722
Name of the Vulnerable Software and Affected Versions Wasmtime versions 24.0.0 through 24.0.4 Wasmtime versions 36.0.0 through 36.0.2 Wasmtime versions 37.0.0 through 37.0.2 Wasmtime versions 38.0.0 through 38.0.3 Description Wasmtime’s Rust embedder API has an issue where a WebAssembly shared...
Malicious code in exciting_kingfisher_dumbs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd9f00245ce84abdf8c0ba71dabe0ef293875b00d00e924920f26db9cf37819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-80986
Malicious code in parentalmarmosetdumbs npm...
EUVD-2025-81790
Malicious code in gleamingviperdumbs npm...
Malicious code in unknown_rabbit_dumbs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a78b86f83e144dd035614cdcc620e9db2e51f6266ddc0c7b65806617382d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-81706
Malicious code in helpfulmarlindumbs npm...
EUVD-2025-80531
Malicious code in smilingarmadillodumbs npm...
EUVD-2025-79986
Malicious code in xenialturkeydumbs npm...
EUVD-2025-81812
Malicious code in genuinecowdumbs npm...
EUVD-2025-80519
Malicious code in solarchameleondumbs npm...
EUVD-2025-81709
Malicious code in heavybobolinkdumbs npm...
EUVD-2025-81213
Malicious code in minormolluskdumbs npm...
EUVD-2025-80351
Malicious code in suspiciousantelopedumbs npm...
EUVD-2025-81512
Malicious code in interiorechidnadumbs npm...
EUVD-2025-81569
Malicious code in independentloondumbs npm...
EUVD-2025-82275
Malicious code in deafkingfisherdumbs npm...
EUVD-2025-80516
Malicious code in solarhedgehogdumbs npm...
Malicious code in normal_flamingo_dumbs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7534073f7f4bc1c59b8123deddd76f924576395c6658fa59b37a4c1a2dd28d55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...