EUVD-2025-176644

Malicious code in rho-log-cluster-decode-pi npm...

Malicious code in sigma-file-signal-log-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e56f9455f2e267b6923668bc3fcc20ae59667c62ffee139e2dfe75c84d11eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upsilon-decode-catch-log-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0f728a55c388778d0b6ad28ccfe8a52b73fe5f721ab54b852d2982c0211dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179248

Malicious code in double-grid-resolve-data-log npm...

EUVD-2025-175697

Malicious code in void-fork-zero-log-code npm...

EUVD-2025-175819

Malicious code in unix-earth-zero-decrypt-log npm...

Malicious code in rho-log-cluster-decode-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e158f5e7a59fbb585788a53c6a7097b2252192694188b07c35deacb6bc24a006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178651

Malicious code in grep-zero-sigma-log-big npm...

EUVD-2025-178372

Malicious code in interface-stack-mock-execute-log npm...

EUVD-2025-178037

Malicious code in log-delta-daemon-finally-minify npm...

EUVD-2025-178036

Malicious code in log-info-good-promise-user npm...

EUVD-2025-176387

Malicious code in sigma-file-signal-log-report npm...

EUVD-2025-176405

Malicious code in shell-integer-optimize-log-promise npm...

EUVD-2025-178039

Malicious code in log-byte-cluster-uglify-error npm...

EUVD-2025-179926

Malicious code in byte-log-float-cold-analyze npm...

EUVD-2025-178827

Malicious code in function-bundle-log-validate-grid npm...

CVE-2025-31645

Uncontrolled search path for some System Event Log Viewer Utility software for all versions within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege...

CVE-2025-60698

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub432F60 function in prog.cgi stores user-supplied SetSysLogSettings/IPAddress values in NVRAM via nvramsafeset"SysLogRemoteIPAddress", .... These values are...

CVE-2025-8421

An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges...

CVE-2025-8421

An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges...