13230 matches found
EUVD-2025-178704
Malicious code in global-centauri-jabbah-husky npm...
EUVD-2025-178673
Malicious code in graviton-command-global-axios npm...
EUVD-2025-178698
Malicious code in global-polaris-spica-iota npm...
EUVD-2025-179676
Malicious code in colors-paleomagnetism-global-unuk npm...
MAL-2025-187184 Malicious code in global-polaris-spica-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c782e5acf5440df7201aeaf4eab97c6ad886082ad36c3af25de05758917d3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178705
Malicious code in global-cassini-hexo-flare npm...
EUVD-2025-178697
Malicious code in global-rollup-plugin-lightyear-thermochronology npm...
MAL-2025-187175 Malicious code in global-apollo-dysonswarm-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8624af2234afa89e899457b5b5c227d1c1b09212d1eb8b2a207d466c14a8b2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177702
Malicious code in native-galaxy-antares-global npm...
Malicious code in colors-paleomagnetism-global-unuk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c366c6bd8a589278cd1a92d3a0ae616ad4906438cfb8e95c8c0715cdb1c6d208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124923
In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Change findvirq to return -EEXIST when a VIRQ is bound to a different CPU than the one passed in. With that, remove the BUGON from bindvirqtoirq to propogate the error upwards. Some VIRQ...
CVE-2025-40161
In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix SGI cleanup on unbind The driver incorrectly determines SGI vs SPI interrupts by checking IRQ number 16, which fails with dynamic IRQ allocation. During unbind, this causes improper SGI cleanup leading to...
CVE-2025-40160 xen/events: Return -EEXIST for bound VIRQs
In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Change findvirq to return -EEXIST when a VIRQ is bound to a different CPU than the one passed in. With that, remove the BUGON from bindvirqtoirq to propogate the error upwards. Some VIRQ...
CVE-2025-40160
CVE-2025-40160: In the Linux kernel Xen event handling, find_virq() now returns -EEXIST when a VIRQ bound to a different CPU, replacing the previous BUG_ON() path. This affects per-domain/global VIRQs (which must be bound to CPU0 before migration). A second bind for per-domain/global VIRQs is tre...
EUVD-2025-123282
Malicious code in promise-global-wolf-arcturus npm...
EUVD-2025-120991
Malicious code in umbriel-colors-vulcan-global npm...
EUVD-2025-111268
Malicious code in mensa-deneb-global-mui npm...
EUVD-2025-112548
Malicious code in indus-global-library-parcel npm...