12073 matches found
EUVD-2025-112442
Malicious code in install-chakra-ui-loopback-antares npm...
EUVD-2025-121533
Malicious code in supervisor-install-postgres-node-sass npm...
MAL-2025-143148 Malicious code in halley-install-pavo-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf4e6027a9e5ed23f0c187619d11b350f940038da89434376ae24c57a4c84cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in install-umbriel-quark-octans (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcbfcb6557d0e33dc30e56738fb4e41d9731edd32959fdc035f77fd6f13a42d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in process-install-rollup-plugin-readable (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d53156fae37387a3d630d0ef0fa551919d0a384042b09cca6044d0c86ea7788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143690 Malicious code in install-uninstall-mira-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e84c856cd0e9886740c1235d889f235ed09f42e79e4b38c5ce76c4e8b49ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143682 Malicious code in install-rimraf-nova-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a6bb9d55fc9bbf225f87ea52b6f59a890034af0ab668485ba8c1b7b3b42f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141473 Malicious code in dagda-install-global-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b312c96b134e33169689e7078f37ab23390dbb17c7e278ee6a0d2054c08074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111376
Malicious code in materialize-europa-install-query npm...
Malicious code in halley-install-pavo-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf4e6027a9e5ed23f0c187619d11b350f940038da89434376ae24c57a4c84cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111754
Malicious code in levels-oberon-install-antares npm...
PT-2025-46701
Name of the Vulnerable Software and Affected Versions Lenovo Dock Manager affected versions not specified Description An improper default permission issue exists in Lenovo Dock Manager. Under specific installation conditions, an authenticated local user may be able to redirect log files with...
Fedora: Security Advisory (FEDORA-2025-45da53cabc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Vulnerabilities fixed in Microsoft Dynamics
Microsoft fixed vulnerabilities in Dynamics The vulnerabilities are in Dynamics 365 On Premise and Dynamics Field Service and allow a malicious person to access sensitive data, or impersonate another user. Microsoft has made updates available that fix the described vulnerabilities. We encourage y...
Npm Package Targeting GitHub-Owned Repositories Flagged as Red Team Exercise
Cybersecurity researchers have discovered a malicious npm package named "@acitons/artifact" that typosquats the legitimate "@actions/artifact" package with the intent to target GitHub-owned repositories. "We think the intent was to have this script execute during a build of a GitHub-owned...
CVE-2025-10714
AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escalation within Microsoft Windows operating system. This vulnerability can only be exploited if the attacker has access to the local Windows machine and sufficient access rights...
CVE-2025-13014
Use-after-free in the Audio/Video component. This vulnerability affects Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5...
CVE-2025-13020
Use-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...