MAL-2025-67133 Malicious code in central-green-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e442f783213bf2bcb0f1b472d622924bbfab171d90bba941cae6b4d61a66b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71626 Malicious code in working-green-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef3068ffa3f2db4309647cd36cb75cce7a4ca2523fe07cf7bdf8057ce0923a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68404 Malicious code in forward-green-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d84f0d46265071803cd16aaffd5a7f748dda694f2c4ba88ecdc8f6793451115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55358

Malicious code in colossal-green-ferret npm...

Malicious code in central-green-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e442f783213bf2bcb0f1b472d622924bbfab171d90bba941cae6b4d61a66b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52721

Malicious code in popular-green-starfish npm...

EUVD-2025-53501

Malicious code in like-green-salamander npm...

Malicious code in brave-green-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b58ad63acab6c201c425758f386bcdf1f5f7fd96a2f0da7496174552962352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenogeneic-green-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d2fec2603c7a7607418a492541a157dda2061bd6a33fbc3a5a045bbcb5f686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51967

Malicious code in small-green-gibbon npm...

EUVD-2025-55108

Malicious code in criminal-green-bug npm...

EUVD-2025-50977

Malicious code in xenial-green-lizard npm...

EUVD-2025-52830

Malicious code in parliamentary-green-parrot npm...

EUVD-2025-51350

Malicious code in uninterested-green-lungfish npm...

EUVD-2025-54957

Malicious code in deliberate-green-skunk npm...

EUVD-2025-53442

Malicious code in long-green-mouse npm...

EUVD-2025-52183

Malicious code in satisfied-green-gopher npm...

MINI-GFP4-P698-P7PH

Bulletin has no description...

CVE-2025-8414 Zigbee Green Power Host Buffer Overflow Vulnerability

Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerabili...

CVE-2025-8414 Zigbee Green Power Host Buffer Overflow Vulnerability

Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerabili...