CVE-2025-24307

Intel CIP software vulnerability CVE-2025-24307 affects Intel® CIP software prior to WIN_DCA_2.4.0.11001, involving privilege management in Ring 3: User Applications. The flaw may allow an unprivileged, authenticated user with high complexity attack requirements to escalate privileges and manipul...

CVE-2025-20056

CVE-2025-20056 describes improper input validation in Intel VTune Profiler prior to 2025.1, enabling local privilege escalation and potential data manipulation by an authenticated, low-privilege user with no user interaction. Red Hat and ENISA/other sources corroborate the same description. Intel...

CVE-2025-20056

Improper input validation for some Intel VTune Profiler before version 2025.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may...

Malicious code in small_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f63d8a4cdc72ccf7f67d9eec0d680c2af296482a9aa068beb672e65934772e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-sasag96-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ed30aa2fe03d9d3e322840cf568cadebe2ef8ae4038507216f1d06eb174bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelling_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5336858b7c98d6c68d8a3b9ac36e882930a86313d4b35e97f2e0d64c6dfda9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f153fb1e080dfba4fd6cb3ca4d6b45a5c5b84b7ad791690fca8ee6a0e345e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-oblok10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d431ac980b99b3d9dce72f228c83189b69c2158077b46a675cda0392b411cf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-ketan57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a4b43b0a800d4b728feffeafb99701d48feffab517b87f7c3115d38a6a4473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-lapis78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75d25da3f26d6ba7a3f03693e136d7ce6abee8a7c8f418c95a8a14b72361f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117450 Malicious code in tight_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f2e8fe8811faaf09754ea3df9d64db92a5f802bfbd7a9be87763b0479dd09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116788 Malicious code in rifqi-nasisayur15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe999f0abcd7c2030ac1e0161a27fe28c20857320487de62cc3ea438a18975b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115555 Malicious code in little_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94c36fe8dfd1dbca0742cf64ccb8b8a785cd88275c0a89f5bdb84dd3d39c177d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116169 Malicious code in ogi-asinan43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fadd11d24dc1f8abb30095df4a821e20c95e5ee0675843020ec4eb3a10db431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113907 Malicious code in fascinating_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab95acb50f19e123d8a1e0d86705572819cfc8741a6d547f2d7c26301e636173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114554 Malicious code in hanafi-sate30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52c9958c91ef56d6a584eb52b9247d1a1b3ad18b0e93c3fcafe5dd7b4fd95d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-jengkol67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03fd4cf4fe20581142fec8ee2852e1d66a708a499de713d8a7f3a88173205d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-menjes26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cec7a945c328e41f751f819190cfbd83710ff97bedd4b99b2252b22c47c80ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-nasipecel93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e439fc993a7a769e35ba24be1257cfc5abf6cab90b9c5285fefd6e05923a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-pisang59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0167c3e095dabfac0f7b11026e90cfc9d35b388321980b6a9c2ce20f4d557b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...