MAL-2025-63280 Malicious code in hadianto-martabak1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2feb301516deab726a1e2ec7240e5c5d479a689adc031dd79fe12cb332b098b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66334 Malicious code in yanti-telur35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bcb3d4d98fb6233f8ef10b0c354caaf902986d347e3b487c0b33b3d34185d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Automated Hardware Trojan Insertion in Industrial-Scale Designs

Industrial Systems-on-Chips SoCs often comprise hundreds of thousands to millions of nets and millions to tens of millions of connectivity edges, making empirical evaluation of hardware-Trojan HT detectors on realistic designs both necessary and difficult. Public benchmarks remain significantly...

PT-2025-46222

Name of the Vulnerable Software and Affected Versions TEE affected versions not specified Description A memory consistency issue exists within the TEE EcDSA algorithm. This issue may result in the generation of incorrect signature results, though the probability of this occurring is low...

CVE-2025-42886: Improper Neutralization of Input During Web Page Generation

Due to a Reflected Cross-Site Scripting XSS vulnerability in SAP Business Connector, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated victim accesses this link, the injected input is processed during web page generation, resulting in...

CVE-2025-42887: Improper Control of Generation of Code

Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availabilit...

PT-2025-46373

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Framework affected versions not specified Description The NVIDIA NeMo Framework contains a flaw in a script that could allow an attacker to manipulate code generation with malicious input. Exploitation of this issue may result in...

CVE-2025-42895: Improper Control of Generation of Code

Due to insufficient validation of connection property values, the SAP HANA JDBC Client allows a high-privilege locally authenticated user to supply crafted parameters that lead to unauthorized code loading, resulting in low impact on confidentiality and integrity and high impact on availability o...

CVE-2025-63288

In Open5GS 2.7.6, AMF crashes when receiving an abnormal NGSetupRequest message, resulting in denial of service...

Malicious code in female_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e2d3cd9b0f61f052bcfdd1a07b2e144592bbd0637c1cef50e5d7c7e4cf53d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lovely_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8fb05a3e69337638750044c95ba42b8475b4d78a9afafc094f7d18e0d45ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okay_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f0fbeb0931ca8337afe8d27957a44098f0bd30128f78bc14f1d813f75ab477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy_wren_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25c03f93468570d1270c87ebc2242a05c328308cb9c808496340a4dfc3ad50f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f3667cea16c37f8a5d2ffcef6c96d20aba83de2d554c091141ffffb9805f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60581 Malicious code in grumpy_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cfa7ab5bd104a8a9ad0488a18b806d693c7d2c4f1170033dbd3def4f24a1f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60560 Malicious code in good_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a7de01b054741bcf3293f0d6734f681a7504aedcd44555d72bd342cca03029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61539 Malicious code in united_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f37703f42cef87dfc169d93de13fb0402a38951bbe76258eeb2a80abafe20cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acute_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13478142cc720242645afdfc71f0d769dcca2cf9d50b19478f015a8a13878d99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61534 Malicious code in unhappy_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80809baec559d4f5d99fe3a1eea886dffd4a1e9d5d257d73c4c33b1899c1e04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-klanting15-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c228f5355ade91760995c360966d6943e988b5409801c4d80f88ffd0f67373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...