8121 matches found
EUVD-2025-116187
Malicious code in barnard-nova-sass-loader-configstore npm...
EUVD-2025-114701
Malicious code in cypress-spectron-webdriver-postcss-loader-canopus npm...
MAL-2025-145832 Malicious code in ophiuchus-passport-process-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50c83a55c2733615628163d24fea12ab6fe3cc3781c688f051cc3fa742a5c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146414 Malicious code in postcss-loader-winston-transport-spinner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ee82fc5bbb44b457adbfa013a4a759e5e0903d4a9c8be123b2c3e8ea262532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146410 Malicious code in postcss-loader-slidev-gulp-bellatrix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862d33be04bc9356770af83130173cb0e8ea065555eca3cac16d8de2bd2a5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in postcss-loader-fork-levels-venus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeb87c440bcb3eff380092f73c31bd01232d896ff500023793df85c072d0644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124593
Malicious code in nconf-quantum-style-loader-webdriver-mocha npm...
EUVD-2025-115534
Malicious code in ceres-oberon-less-loader-proxima npm...
EUVD-2025-111796
Malicious code in less-loader-cross-env-nebula-ceres npm...
EUVD-2025-114796
Malicious code in css-loader-quantum-eslint-betelgeuse npm...
Malicious code in mocha-less-loader-axios-npm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bba08a828bd8ae434fdbe2f07303a911d202385632eb1fa95adf5361f03147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113905
Malicious code in eslint-config-postcss-loader-ignite-webdriver-mocha npm...
MAL-2025-141305 Malicious code in css-loader-hapi-webpack-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206c0e0e9e26400badf51e77a0da3c872553ce721b95403abc7cd4bee874bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in reveal-md-postcss-loader-enceladus-xanthus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b7e1975ba8584db82d63f8d4ed5cfc113066d24a35aac8206fb73a8d4b315c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124833
Malicious code in mocha-less-loader-axios-npm npm...
Unbreakable Enterprise kernel security update
5.4.17-2136.349.3.1 - i40e: add validation for ringlen param Lukasz Czapnik Orabug: 38604171 CVE-2025-39973 - i40e: increase max descriptors for XL710 Justin Bronder Orabug: 38604171 CVE-2025-39973 5.4.17-2136.349.3 - Revert 'net/mlx5e: Update and set Xon/Xoff upon MTU set' Jakub Kicinski Orabug:...
GHSA-F83H-GHPP-7WCC Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc
🚀 Overview This report demonstrates a real-world privilege escalation vulnerability in pdfminer.six due to unsafe usage of Python's pickle module for CMap file loading. It shows how a low-privileged user can gain root access or escalate to any service account by exploiting insecure deserializatio...
EUVD-2025-38331
Insecure Deserialization pickle in pdfminer.six CMap Loader — Local Privesc...
Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc
🚀 Overview This report demonstrates a real-world privilege escalation vulnerability in pdfminer.six due to unsafe usage of Python's pickle module for CMap file loading. It shows how a low-privileged user can gain root access or escalate to any service account by exploiting insecure deserializatio...