Malicious code in hendra-klipo80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965ae977e0c97404745b02956b69fbe813a73266a2d9add4992778721cfd8478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65157 Malicious code in rina-tempe50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9ed5aeb626d2d6995f7c9a9ecef8fd063541766f838c137021f13d9ec9f30e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64188 Malicious code in mahesa-mendoan15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d701c0358461c315efa5b276a148f7955c0aadc34240bceb019c22b49f5717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62779 Malicious code in erick-rangginang8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3f02e3718b4394260efece37792ca6623ed9196f555539a348b55d1dd97572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64193 Malicious code in mahesa-nasiuduk64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 354cb1399c7ddcf731b76751223f50d1f8a73f9b5f389cb9cc591d343053efb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f6b54bae4509f5337e897b7df29ff3026f1a81deb6ff50a788e766109a7154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62359 Malicious code in clean_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f3b24034757684da10d3c6447687dd5c9ddffb8c44be3b12ca28c6fc4bda21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62150 Malicious code in budi-mangut93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9483f041e2c5ec8632141c10330ec2b48f1b1c8ca2f203db14feaffc8e9bf68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64154 Malicious code in lutfi-sate58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6b0ae8848ee87ccff1080a946374b7b69bb91fb673763d0d7ce3f51744c776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42884

CVE-2025-42884 affects SAP NetWeaver Enterprise Portal. The issue allows an unauthenticated attacker to inject JNDI environment properties or pass a URL during JNDI lookup, enabling access to an unintended JNDI provider and potentially leading to disclosure or modification of server information (...

Intel CIP 安全漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an elevation of privilege vulnerability that stems from mismanagement of privileges and can be exploited by an attacker to cause elevation of...

Intel QuickAssist Technology 安全漏洞

Intel QuickAssist Technology is an Intel technology that improves server utilization. It improves server efficiency by sharing the stress of compute-intensive tasks to equalize server pressure. A security vulnerability exists in Intel QuickAssist Technology prior to version 2.6.0, which is caused...

PT-2025-46542

Name of the Vulnerable Software and Affected Versions LOGO! 12/24RCE 6ED1052-1MD08-0BA2 affected versions not specified LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 affected versions not specified LOGO! 230RCE 6ED1052-1FB08-0BA2 affected versions not specified LOGO! 230RCEo 6ED1052-2FB08-0BA2 affected...

PT-2025-46380

Name of the Vulnerable Software and Affected Versions Intel VTune Profiler versions prior to 2025.1 Description A flaw exists in Intel VTune Profiler that may allow an escalation of privilege. An unprivileged software adversary with an authenticated user and a low complexity attack may enable dat...

WordPress Easy Digital Downloads plugin order manipulation vulnerability

WordPress Easy Digital Downloads plugin is a free plugin designed for WordPress to create and manage a digital merchandising store that supports the sale of downloadable content such as eBooks, software, media and more. WordPress Easy Digital Downloads plugin suffers from an order manipulation...

Intel QAT 安全漏洞

Intel QAT Windows software refers to the collection of Intel® Data Protection and Compression Acceleration Technology software components that provide support for the Windows operating system. The Intel QAT Windows software has a buffer overflow vulnerability that originates from a buffer overflo...

CVE-2025-12919

A vulnerability was detected in EverShop up to 2.0.1. Affected is an unknown function of the file /src/modules/oms/graphql/types/Order/Order.resolvers.js of the component Order Handler. The manipulation of the argument uuid results in improper control of resource identifiers. The attack may be...

CVE-2025-43079

The Qualys Cloud Agent included a bundled uninstall script qagentuninstall.sh, specific to Mac and Linux supported versions that invoked multiple system commands without using absolute paths and without sanitizing the $PATH environment. If the uninstall script is executed with elevated privileges...

Malicious code in governing_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588289189718432160b8f306b7695ca6b683fddee132ec923dfbd3537f14c674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61567 Malicious code in varied_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e32a8bf536316e295e9789d024cb197e67f4449db3c5afdee2a7b5c5ffd186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...