CVE-2022-4983 TEC-IT TBarCode SDK 11.15 Remote File Create

TEC-IT TBarCode version 11.15 contains a vulnerability in the TBarCode11.ocx ActiveX/OCX control's licensing handling INI-file based that can be abused to cause remote creation of files on the host filesystem. Depending on where files can be created and which filenames are allowed, this can allow...

EUVD-2025-134629

Malicious code in analua-aki-ini npm...

EUVD-2025-134660

Malicious code in anala-aki-ini npm...

EUVD-2025-134661

Malicious code in anala-aki-ini npm...

EUVD-2025-134600

Malicious code in analusa-aki-ini npm...

EUVD-2025-134628

Malicious code in analua-aki-ini npm...

Malicious code in analusa-aki-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd27dc07251b4d47ebe088ba06c4a9ad456c519c4b922cf340fa4a7f0bde189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134601

Malicious code in analusa-aki-ini npm...

EUVD-2025-141889

Malicious code in goodafiun-tufa-ini npm...

EUVD-2025-137507

Malicious code in polymer-ini-verst npm...

MAL-2025-178073 Malicious code in polymer-ini-verst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbe649922eb1063312557a09b709f0850b12ecf21684f2025b76ce62509eee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ini-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 832c1c99d14408568497be44cbfefe7c07de60e230a23fea28185bc516ca3e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64407

Technical details for CVE-2025-64407 are not publicly provided in the connected documents. Available sources discuss related vulnerabilities (CVE-2024-12425/12426) and Apache OpenOffice issues, but do not specify this CVE’s affected products, root cause, or fixes.

EUVD-2025-112531

Malicious code in ini-carpo-async-unuk npm...

EUVD-2025-112529

Malicious code in ini-cors-barnard-xerxes npm...

EUVD-2025-113473

Malicious code in fornax-mongodb-ini-sass-loader npm...

EUVD-2025-113586

Malicious code in flare-gridsome-sirius-ini npm...

EUVD-2025-122917

Malicious code in quito-subscription-neptune-ini npm...

EUVD-2025-112525

Malicious code in ini-duplex-mini-css-extract-plugin-stream npm...

Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...