EUVD-2025-63579

Malicious code in inappropriatelouserequirement npm...

Malicious code in inappropriate_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef14106edc2b7970cf98c40f1362d57bd6f8bf4c231008f1d665760bd1866922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-85580

Malicious code in inappropriatefishz3n npm...

EUVD-2025-53813

Malicious code in inappropriate-white-pheasant npm...

EUVD-2025-53819

Malicious code in inappropriate-indigo-snail npm...

EUVD-2025-53818

Malicious code in inappropriate-lavender-reptile npm...

EUVD-2025-53821

Malicious code in inappropriate-amaranth-lion npm...

EUVD-2025-53814

Malicious code in inappropriate-violet-puma npm...

EUVD-2025-53816

Malicious code in inappropriate-silver-herring npm...

Malicious code in inappropriate-indigo-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cee0ce184009a61a7a1b5a401a3238d0527b7855b66865a92e88a0e3aa84ea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53820

Malicious code in inappropriate-coral-quokka npm...

EUVD-2025-53815

Malicious code in inappropriate-silver-pelican npm...

EUVD-2025-53817

Malicious code in inappropriate-plum-eel npm...

MAL-2025-68831 Malicious code in inappropriate-lavender-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53a5ad5ae8eec3da4914b97f9b639f8d09ac54c71020e2d6854bae505c7ed2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

chromium -- security fix

Chrome Releases reports: This update includes 1 security fix: 457351015 High CVE-2025-13042: Inappropriate implementation in V8. Reported by 303f06e3 on 2025-11-03...

CVE-2025-12728

Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-12729

Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-12727

Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-12433

Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

CVE-2025-12431

Inappropriate implementation in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Chromium security severity: High...