4349 matches found
MAL-2025-144146 Malicious code in kaus-hyperion-polaris-eclipse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9bd7a1286a4e1e9893b11fe52ebfd03d8ef4f1d008b1af6210b476bed676352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122457
Malicious code in rocket-eclipse-stop-procyon npm...
MAL-2025-148240 Malicious code in sqlite-spawn-ultra-eclipse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be06e9b3e8c2658261f00ccc757cc103e2be3f4c5ae7c655f5dd153755439ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143500 Malicious code in hyperion-server-eclipse-aether (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd58e9481e031c0504d3d4c1415914d18634ea2b59c9a980a8c56fb93290b048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in child-process-foundation-eclipse-spectron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c4f59859c4a243e08dd39070370b2f65a3c8c6d979f8032023e0bd0b311b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139321 Malicious code in alphard-eclipse-deneb-atlas (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669350bcf59eb37c221ae4778203358027c54bfef1008f0df4c38b211cf9331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141565 Malicious code in dependencies-eclipse-websockets-yonder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6e5431a759d39a0e0c0617d7467bc86541b6958fb8d0453e08ae6eccc56a3be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114542
Malicious code in dependencies-equinox-despina-eclipse npm...
MAL-2025-148643 Malicious code in thuban-bunyan-sails-eclipse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f87d13068d3b1e7ebbe235715548e61fa520b765c466379b4d5c09348677bf3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112439
Malicious code in install-eclipse-supervisor-markdown-pdf npm...
EUVD-2025-113991
Malicious code in equinox-eclipse-stream-mira npm...
Security Bulletin: Due to the use of Eclipse JGit, IBM webMethods Integration is affected by denial of service, and other security issues.
Summary Eclipse JGit is used by IBM webMethods Integration in repository function CVE-2025-4949 Vulnerability Details CVEID:CVE-2025-4949 DESCRIPTION: In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implemen...
Eclipse Foundation Revokes Leaked Open VSX Tokens Following Wiz Discovery
Eclipse Foundation, which maintains the open-source Open VSX project, said it has taken steps to revoke a small number of tokens that were leaked within Visual Studio Code VS Code extensions published in the marketplace. The action comes following a report from cloud security company Wiz earlier...
Linux Distros Unpatched Vulnerability : CVE-2025-11965
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Vert.x versions 4.0.0, 4.5.21 and 5.0.0, 5.0.4, a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidd...
Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in IBM Java
Summary IBM Sterling Control Center is affected by vulnerabilities in IBM Java CVE-2025-21587, CVE-2025-30698, CVE-2025-2900 and CVE-2025-4447 Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in Java SE related to the Server: DDL component could allow a remote...
pgcodekeeper 安全漏洞
pgCodeKeeper is an open source Eclipse plugin for database schema management from pgCodeKeeper. A security vulnerability exists in pgcodekeeper version 10.12.0, which stems from storing passwords and usernames in clear text and could lead to the disclosure of sensitive information...
Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.24.0 Release.
Red Hat OpenShift Dev Spaces 3.24.0 has been released. Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. The 3.24 release is based on...
Eclipse BlueChi 安全漏洞
Eclipse BlueChi is an open source service control and state management software for Eclipse. A security vulnerability exists in Eclipse BlueChi that originates from a user with root privileges being able to create or overwrite systemd service unit files on managed nodes, which could lead to...