EUVD-2025-53933

Malicious code in hostile-blue-bedbug npm...

MAL-2025-68716 Malicious code in hostile-blue-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56dcc6daa788a2e5a5a36927e198bbc1884412e4c4b42097f7f916fb66672ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53934

Malicious code in hostile-black-basilisk npm...

EUVD-2025-53931

Malicious code in hostile-bronze-snail npm...

Malicious code in hostile-ivory-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98ce5d8084d21e1d346f583d2982c62f529ff690aad20b0336abf40558e00a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile-blush-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e940ce232f8fa821b1a3606b2f419a62af50d5d09000b707f8008212eccd3c09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53930

Malicious code in hostile-ivory-porpoise npm...

EUVD-2025-53932

Malicious code in hostile-blush-donkey npm...

EUVD-2025-50047

Malicious code in hostilekangarooz3n npm...

EUVD-2025-50046

Malicious code in hostileseahorsez3n npm...

EUVD-2016-9445

Malware in sbrugna...

EUVD-2024-19879

Malicious code in bioql PyPI...

EUVD-2024-27701

Malicious code in bioql PyPI...

php: Leak partial content of the heap through heap buffer over-read in mysqlnd

A flaw was found in the PHP MySQL client library. This vulnerability allows a hostile MySQL server to disclose the content of the client's heap, potentially exposing data from other SQL requests and other users of the same server via malicious server interactions...

PT-2025-35147

Name of the Vulnerable Software and Affected Versions: openmcp-client versions prior to 0.1.12 Description: openmcp-client, a VS Code plugin for MCP developers, contains a flaw where a malicious authorization server endpoint can be provisioned by an attacker when a user on a Windows platform...

CVE-2024-22318

IBM i Access Client Solutions ACS 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.4 is vulnerable to NT LAN Manager NTLM hash disclosure by an attacker modifying UNC capable paths within ACS configuration files to point to a hostile server. If NTLM is enabled, the Windows operating system will try ...

php: Leak partial content of the heap through heap buffer over-read in mysqlnd

A flaw was found in the PHP MySQL client library. This vulnerability allows a hostile MySQL server to disclose the content of the client's heap, potentially exposing data from other SQL requests and other users of the same server via malicious server interactions...

MAL-2025-2291 Malicious code in bsee-shared-hmd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71df5f00c494508630b3f07f67a0db2756f8cd8d1228cf9ef41f5dc6f6b071f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BIT-PHP-MIN-2024-8929 Leak partial content of the heap through heap buffer over-read in mysqlnd

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server...

DEBIAN-CVE-2024-8929

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server...