EUVD-2025-63146

Malicious code in massbobcatz3n npm...

Malicious code in mass_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb78da545df68b414c573f1f433b6ff98a3d520eb99a530cac45f1423ac21b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90746 Malicious code in statutory_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad60a3fc7104d1c995fede0123974d01e4b7de4c817756c0ff977295c9fe3eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mass_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf25ecd43b6a011cb35c3eec4bc17fdbea9d9b40a84e96c7a8602c05321d6a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mass-plum-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c150a916bc8e026094eb584ae62e81f7c72fd45faa1b7940e731af5936b540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53327

Malicious code in mass-plum-vicuna npm...

MAL-2025-69324 Malicious code in mass-silver-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274ded1864b13a10a0703c01cca63541d1b22f6f924634963c1cfeb0331b92ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70486 Malicious code in scrawny-emerald-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66bd8b04ba18f17f5ad122e8cca295214aa4a15dc1abf59d456017d57d60ed68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53325

Malicious code in mass-silver-beaver npm...

Malicious code in mass-purple-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1566fae32358f7ded1d1b5d641600ab28d3184c808f7251450e313f443574684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53326

Malicious code in mass-purple-landfowl npm...

Malicious code in modest_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 375f955bf81fde4770e1724fd9e36f3ca8eeb09b7a409e2e9fa8bc52dfb5274c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49845

Malicious code in massbobolinkz3n npm...

EUVD-2025-46414

Malicious code in masscamelz3n npm...

Deface-TOOLS-

Deface-TOOLS- 😈 DEVIL DEFACER v3.0 🔥 Tools deface paling ganas...

mariadb:10.5 security update

galera 26.4.22-1 - Rebase to 26.4.22 Judy 1.0.5-18 - Remove README.Fedora; no longer needed since 1.0.5 version - Resolves: 1638717 1.0.5-17 - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28 - Drop legacy BuildRoot: and Group: tags - Drop redundant explicit buildroot cleaning -...

CVE-2025-54863

Radiometrics VizAir is vulnerable to exposure of the system's REST API key through a publicly accessible configuration file. This allows attackers to remotely alter weather data and configurations, automate attacks against multiple instances, and extract sensitive meteorological data, which could...

poc

Filament Demo PoC — mass-assignment Purpose Minimal reprod...

Mass Attack Targets WordPress via GutenKit and Hunk Companion Plugins

Mass exploitation attacks are once again targeting WordPress websites, this time through serious vulnerabilities in two popular plugins,…...

Fedora: Security Advisory (FEDORA-2025-59acaa6bd9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...