EUVD-2025-112502

Malicious code in ini-wasat-react-bootstrap-javascript npm...

MAL-2025-140041 Malicious code in blitz-cross-env-ini-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6aac823acd3e3c267be48e988aa756d7993859affa2c0bcf864a109ee1f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140983 Malicious code in commitlint-exec-webdriver-manager-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a29c972093ebe62f0e65806d1b9a7bbb36b4ced01737a961f52681337efd871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143606 Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112384

Malicious code in iota-jasmine-ini-lyra npm...

EUVD-2025-112532

Malicious code in ini-apex-ursa-gemini npm...

EUVD-2025-116790

Malicious code in algol-upgrade-ini-acamar npm...

MAL-2025-143590 Malicious code in ini-event-dependencies-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9c7cfb7f15ef248aaaa8a66266a84dee824fef7044f5a9e9c85acff1ab1726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116212

Malicious code in backend-ini-sedna-ophiuchus npm...

EUVD-2025-112651

Malicious code in hydra-wasat-venus-ini npm...

EUVD-2025-112403

Malicious code in iota-astro-ophiuchus-ini npm...

EUVD-2025-112531

Malicious code in ini-carpo-async-unuk npm...

EUVD-2025-112529

Malicious code in ini-cors-barnard-xerxes npm...

EUVD-2025-113473

Malicious code in fornax-mongodb-ini-sass-loader npm...

EUVD-2025-37474

A vulnerability has been found in Tenda AC8 16.03.34.06. This impacts an unknown function of the file /goform/DatabaseIniSet. The manipulation of the argument Time leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-12618 Tenda AC8 DatabaseIniSet buffer overflow

A vulnerability has been found in Tenda AC8 16.03.34.06. This impacts an unknown function of the file /goform/DatabaseIniSet. The manipulation of the argument Time leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CodeAstro Gym Management System SQL注入漏洞

CodeAstro Gym Management System is a gym management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Gym Management System version 1.0, which stems from incorrect manipulation of the parameter id/iniweight in the file /admin/update-progress.php, which could lead to a SQL...

[SECURITY] Fedora 41 Update: inih-62-1.fc41

The inih package provides simple INI file parser which is only a couple of pages of code, and it was designed to be small and simple, so it's good for embedded systems...

[SECURITY] Fedora 42 Update: inih-62-1.fc42

The inih package provides simple INI file parser which is only a couple of pages of code, and it was designed to be small and simple, so it's good for embedded systems...

EUVD-2021-0772

Malware in sbrugna...