EUVD-2025-44655

Malicious code in vina-bika92-sukiwir npm...

MAL-2025-59135 Malicious code in umi-tek10-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d8f32eca74de0e2fb5b12d86d5e6f421b51067d01ebc704a1965bfa4a26ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59014 Malicious code in tuti-lepet76-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c58e64145233f95bc09c4d9029901ab0c198505f6dbb63ec63a1d196547241a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-tempe79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e579f3a7b3e732d89f1a88237eabbf4ddad094a009b8671752264faec0e48595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-43561

Malicious code in kurniawan-tomat61-sluey npm...

EUVD-2025-39356

Malicious code in udin-bika32-riris npm...

EUVD-2025-39351

Malicious code in udin-empal63-ruro npm...

Malicious code in andi-gado-gado79-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cd98ff06bcab586b5c7801c31a9ad7d6c7b6e36a9ace08ee5dda7492d6d32c The package andi-gado-gado79-remi was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in bambang-jus39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fae25e5a9258fd0c80bed5883f3bbba3f6747826bb7c46b3a85130827526458 The package bambang-jus39-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

EUVD-2025-41228

Malicious code in dian-miebogor16-riris npm...

Malicious code in fadhil-gaplek76-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505847476472653535771aa146e73a6935b6a4c1a7498fd22cb45f5ee99007c0 The package fadhil-gaplek76-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

thunderbird: firefox: Some non-writable Object properties could be modified

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable...

thunderbird: firefox: Some non-writable Object properties could be modified

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable...

thunderbird: firefox: Some non-writable Object properties could be modified

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable...

thunderbird: firefox: Some non-writable Object properties could be modified

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable...

thunderbird: firefox: Some non-writable Object properties could be modified

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable...

PT-2025-46184

Name of the Vulnerable Software and Affected Versions Combodo iTop versions prior to 2.7.13 Combodo iTop versions prior to 3.2.2 Description Combodo iTop, a web-based IT service management tool, is susceptible to cross-site scripting when a dashboard is edited through an AJAX call. This allows fo...

Microsoft Edge (Chromium) < 142.0.3595.66 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 142.0.3595.66. It is, therefore, affected by multiple vulnerabilities as referenced in the November 6, 2025 advisory. - Out of bounds read in WebGPU in Google Chrome on Android prior to 142.0.7444.137 allowed a remote...

MAL-2025-49459 Malicious code in elf-stats-storybook-cookiejar-880 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41a568cb0be6c18f5ce4e4ab81bd7dfe0b1026ba19749c2fee13f5ba70a586b4 The package elf-stats-storybook-cookiejar-880 was found to contain malicious code...

CVE-2025-64187

OctoPrint provides a web interface for controlling consumer 3D printers. Versions 1.11.3 and below are affected by a vulnerability that allows injection of arbitrary HTML and JavaScript into Action Command notifications and prompts popups generated by the printer. An attacker who successfully...