MAL-2025-140359 Malicious code in canopus-hermes-postcss-loader-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64932e18462641061057f9a0061b3b7e8ed093628d7603b096014c31006ad72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-62788

Summary: CVE-2025-62788 affects Wazuh versions prior to 4.11.0. The vulnerability is a heap use-after-free in w_copy_event_for_log() where memory allocated in OS_CleanMSG() is referenced after it has been freed. A compromised or attacker-controlled agent can craft and send a message to the Wazuh ...

EUVD-2018-3091

Malware in sbrugna...