EUVD-2025-52711

Malicious code in positive-scarlet-eagle npm...

MAL-2025-68637 Malicious code in handsome-sapphire-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988195d3d8a1fde62ee7fd53cf1673a85bcf5fc56456c05e6844e17571b7de2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69079 Malicious code in leading-pink-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973dc10a64c9b1696a021b4bbb3c9007b438dca59af0f071d7e9da22441ffd1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51645

Malicious code in suspicious-amethyst-eagle npm...

EUVD-2025-54012

Malicious code in handsome-sapphire-eagle npm...

EUVD-2025-53971

Malicious code in hilarious-violet-eagle npm...

EUVD-2025-50893

Malicious code in yummy-tan-eagle npm...

EUVD-2025-58164

Malicious code in neateaglez3n npm...

EUVD-2025-60254

Malicious code in conservationeaglez3n npm...

Malicious code in proud_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6c72a72c704e00218a042c52a667ec11c1055099270dd25b28b03570a66d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50247

Malicious code in expensiveeaglez3n npm...

EUVD-2025-50295

Malicious code in energeticeaglez3n npm...

Malicious code in energetic_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f8a252c474f50b13e08e8f301fe024257745e5022e7e09507c7624b1606d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-46363

Malicious code in mechanicaleaglez3n npm...

CVE-2025-62776

The installer of WTW EAGLE for Windows 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...

CVE-2025-62776

The installer of WTW EAGLE for Windows 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...

EUVD-2025-36592

The installer of WTW EAGLE for Windows 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...

CVE-2025-62776

The installer of WTW EAGLE for Windows 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...

CVE-2025-62776

The installer of WTW EAGLE for Windows 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...

CVE-2025-62776

CVE-2025-62776 concerns the Windows installer for WTW EAGLE 3.0.8.0, which has an insecure DLL search path that can lead to loading arbitrary DLLs and executing code with the installer's privileges. The root cause is an uncontrolled search path element (CWE-427) affecting the installer. Documente...