241 matches found
MAL-2025-145097 Malicious code in module-algol-npm-quantum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df4076437c513112089b53d9a85ce5172d0f134afb19ff5def94fb7a291385f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kurniawan-rangi26-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378a7c061bd6dd6337d5c724eace2d0d133d1102330530571b3fe00b554bb4ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-128042 Malicious code in kurniawan-dodol13-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cebdc217593687718415a67ea65926d2a294397b211a5e6a0f827b4bdc4be58e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-91046
Malicious code in intimateboobyz3n npm...
MAL-2025-108209 Malicious code in rough_tarantula_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66288a80f08f582676d3edd0dac24daa62ad4f41033219812d321cea824a9532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-81752 Malicious code in tremendous_loon_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55030e5e21dc9da6e9e2170ca5bca14f1244d9fc7266f5062b1f063ea486ef4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-82396 Malicious code in willing_marten_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3cbc420500015fa0a98a387172e426c147e9a26f5318c92a7a246ea9931f7c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ogi-kue16-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef9bcb6acd650f831c996518fd867b7537b412deae4c06b4b4f7969367d2ce4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-38039
OpenTofu affected denials of service in "tofu init" with maliciously-crafted module package responses...
Privilege Escalation
PyInstaller is vulnerable to Privilege Escalation. The vulnerability is due to the bootstrap process appending a special entry to sys.path and attempting to load an optional bytecode-decryption module while that entry is present, which allows an attacker who can create files/directories next to t...
CVE-2025-49655
Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being...
EUVD-2018-0364
Malware in sbrugna...
EUVD-2021-1351
Malware in sbrugna...
EUVD-2018-0361
Malware in sbrugna...
EUVD-2018-0235
Malware in sbrugna...
EUVD-2018-0358
Malware in sbrugna...
EUVD-2018-0624
Malware in sbrugna...
EUVD-2018-0247
Malware in sbrugna...