EUVD-2025-177317

Malicious code in parse-key-lambda-new-socket npm...

EUVD-2025-179376

Malicious code in decompress-simple-lambda-container-meta npm...

EUVD-2025-178155

Malicious code in lambda-transpile-gamma-omicron-resolve npm...

EUVD-2025-178224

Malicious code in kappa-lambda-bundle-omega-bad npm...

EUVD-2025-178156

Malicious code in lambda-quick-monitor-optimize-book npm...

EUVD-2025-178158

Malicious code in lambda-cloud-class-public-meta npm...

EUVD-2025-175863

Malicious code in try-signal-lambda-execute-kernel npm...

EUVD-2025-177181

Malicious code in pi-emulate-lambda-alert-sandbox npm...

MAL-2025-187723 Malicious code in lambda-byte-sigma-static-reject (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e512f773e77c8591c7fdc12e28652a7c98180e468e2eaac0b828ba21c83918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175750

Malicious code in user-lambda-decompress-benchmark-omega npm...

EUVD-2025-178382

Malicious code in integer-lambda-notify-cache-try npm...

EUVD-2025-175397

Malicious code in zeta-lambda-abstract-eta-secure npm...

Malicious code in array-async-export-lambda-transpile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c2bf7c9af1def9500860d07c8a0a69f31f3575833535c28b6b1d0715a5dd9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179722

Malicious code in class-kernel-lambda-void-try npm...

EUVD-2025-178159

Malicious code in lambda-byte-sigma-static-reject npm...

EUVD-2025-178221

Malicious code in kappa-pi-nu-beta-lambda npm...

EUVD-2025-176474

Malicious code in sed-promise-book-sun-lambda npm...

MAL-2025-190011 Malicious code in try-phi-lambda-public-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6bcc756a01c3ca9eba1d866d684677df2aef5dd2d72a7a333a92b7bbacde80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

[SECURITY] Fedora 43 Update: python-cloudpickle-3.1.2-1.fc43

cloudpickle makes it possible to serialize Python constructs not supported by the default pickle module from the Python standard library. cloudpickle is especially useful for cluster computing where Python expressions are shipped over the network to execute on remote hosts, possibly close to the...

Arbitrary Code Execution

Keras is vulnerable to Arbitrary Code Execution. The vulnerability is due to Model.loadmodel not honoring safemode=True when reading legacy .h5/.hdf5 archives and deserializing pickled Lambda-layer code from a crafted model file, which allows an attacker to supply a malicious archive that execute...