8121 matches found
EUVD-2025-124593
Malicious code in nconf-quantum-style-loader-webdriver-mocha npm...
EUVD-2025-115534
Malicious code in ceres-oberon-less-loader-proxima npm...
EUVD-2025-111796
Malicious code in less-loader-cross-env-nebula-ceres npm...
EUVD-2025-123764
Malicious code in phoebe-lynx-less-loader-passport npm...
EUVD-2025-123499
Malicious code in postcss-slides-browserify-less-loader npm...
EUVD-2025-114790
Malicious code in css-loader-terser-rimraf-lyra npm...
EUVD-2025-123816
Malicious code in perseus-postcss-loader-thuban-cosmiconfig npm...
MAL-2025-149228 Malicious code in vulcan-css-loader-command-nconf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c75a1ddeac8182be8aefa40e93e61225edfd8a7eed0d9cebe0d2517f924b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121583
Malicious code in style-loader-sqlite-optimize-css-assets-webpack-plugin-antares npm...
EUVD-2025-114517
Malicious code in despina-css-loader-update-ganymede npm...
EUVD-2025-116683
Malicious code in antares-less-loader-middleware-sequelize npm...
EUVD-2025-123255
Malicious code in prompts-less-loader-child-process-sedna npm...
Malicious code in puppeteer-xenon-style-loader-xml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b56d70ad52ccda6fd5988d383f8a86e3e219253eb55ac0bbc9f6a1c69a368d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mocha-less-loader-axios-npm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bba08a828bd8ae434fdbe2f07303a911d202385632eb1fa95adf5361f03147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114796
Malicious code in css-loader-quantum-eslint-betelgeuse npm...
Unbreakable Enterprise kernel security update
5.4.17-2136.349.3.1 - i40e: add validation for ringlen param Lukasz Czapnik Orabug: 38604171 CVE-2025-39973 - i40e: increase max descriptors for XL710 Justin Bronder Orabug: 38604171 CVE-2025-39973 5.4.17-2136.349.3 - Revert 'net/mlx5e: Update and set Xon/Xoff upon MTU set' Jakub Kicinski Orabug:...
GHSA-F83H-GHPP-7WCC Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc
🚀 Overview This report demonstrates a real-world privilege escalation vulnerability in pdfminer.six due to unsafe usage of Python's pickle module for CMap file loading. It shows how a low-privileged user can gain root access or escalate to any service account by exploiting insecure deserializatio...
EUVD-2025-38331
Insecure Deserialization pickle in pdfminer.six CMap Loader — Local Privesc...
Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc
🚀 Overview This report demonstrates a real-world privilege escalation vulnerability in pdfminer.six due to unsafe usage of Python's pickle module for CMap file loading. It shows how a low-privileged user can gain root access or escalate to any service account by exploiting insecure deserializatio...