10280 matches found
CVE-2025-8485
An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application...
CVE-2025-61667
The Datadog Agent collects events and metrics from hosts and sends them to Datadog. A vulnerability within the Datadog Linux Host Agent versions 7.65.0 through 7.70.2 exists due to insufficient permissions being set on the opt/datadog-agent/python-scripts/pycache directory during installation. Co...
Malicious code in install-spinner-dagda-fusion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c279966d85af2513de0e15fb02e3c285bc0569db9813fc0f1d2194166881e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112428
Malicious code in install-semantic-ui-warp-fork npm...
EUVD-2025-121286
Malicious code in thuban-backend-install-wolf npm...
EUVD-2025-123402
Malicious code in prettier-stylelint-sync-install-loopback npm...
EUVD-2025-112423
Malicious code in install-uninstall-mira-sass-loader npm...
EUVD-2025-111378
Malicious code in materialize-css-loader-install-dagda npm...
EUVD-2025-124688
Malicious code in mutation-rehype-semantic-ui-install npm...
EUVD-2025-112442
Malicious code in install-chakra-ui-loopback-antares npm...
Malicious code in hugo-prompts-install-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323f5bb8d985d0dc02ff975746ce4d5f88126d9da820e1d55eb820e3a144653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in prettier-nightwatch-request-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae148927e5d7b7502bad537bf67cebc1408a2573a7de2260fdf5b06c39e274e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123903
Malicious code in pegasus-backend-event-install npm...
EUVD-2025-116888
Malicious code in adonis-norma-install-selenium npm...
EUVD-2025-123566
Malicious code in polaris-meteor-babel-install npm...
EUVD-2025-122034
Malicious code in server-apollo-markdown-install npm...
Malicious code in dagda-install-global-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b312c96b134e33169689e7078f37ab23390dbb17c7e278ee6a0d2054c08074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120604
Malicious code in webdriver-manager-magellan-install-eslint npm...