PT-2025-47018

Name of the Vulnerable Software and Affected Versions Positive Technologies MaxPatrol 8 affected versions not specified Positive Technologies XSpider affected versions not specified Description The client communication service, listening on TCP port 2002, is susceptible to a remote...

org.webjars.npm:vega-embed (6.21.0) potentially affected by CVE-2025-59840 via org.webjars.npm:vega-interpreter (1.0.4)

org.webjars.npm:vega-interpreter MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vega-interpreter and may be impacted: - org.webjars.npm:vega-embed 6.21.0 Source cves: CVE-2025-59840 Source advisory:...

EUVD-2025-50819

Bugsink is vulnerable to unauthenticated remote DoS via crafted Brotli input via CPU...

PT-2025-46873

Name of the Vulnerable Software and Affected Versions HP LaserJet Pro printers affected versions not specified Description Certain HP LaserJet Pro printers may be susceptible to information disclosure, potentially exposing credentials. This can occur by altering the scan/send destination address...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-28 (1.0.0)

ruji-28 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-28 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165253...

Malicious code in known-green-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ea21280e0ddb21957b7e41e5deb88d67447b8bbea9ad0752123e40a897d3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117276

Malicious code in known-green-loon npm...

Malicious code in known_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f36f9a18025bb5552abe1ee320024459cbaca19b607f3e75b115f2b9f201fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in known_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295b082271888d9bb504a5eaf4d500aabc4d056cd79d69afc1dae875d183178d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97473

Malicious code in knownmandrillz3n npm...

Malicious code in known_cod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f53d2e5c72b223e0ef8be5b4bd00a0c9875cfe097a9cbcae6566860950c4232a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

curl: Hash exposed in public repository

An image hash is publicly exposed on Github Steps to reproduce: See at https://github.com/curl/curl/blob/master/Dockerfile Solution: If you want to keep the hash, the repository should be private Use official tags without specific hashes or environment variables Best, @skymander Impact An attacke...

EUVD-2025-76456

Malicious code in knownstingray-appteadev npm...

EUVD-2025-76458

Malicious code in knowncoral-strongdev npm...

MAL-2025-98775 Malicious code in known_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ecf83b7097ee4c962c67ac2b6004eeb73471bd2fdce621e918c1a01be339d2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in known_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdbec3eb0eea39170bec5b771bf47c1943ca1ace3e9892291fc94ca428ed32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63379

Malicious code in knownclamz3n npm...

EUVD-2025-63374

Malicious code in knownwormz3n npm...

EUVD-2025-63378

Malicious code in knowncougarz3n npm...

MAL-2025-95175 Malicious code in known_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d945c03156d2d82b1ecd30e38d7d71d6bd631eac842c6fcf6318eb81f7658152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...