8300 matches found
CVE-2025-64345 Wasmtime provides unsound API access to a WebAssembly shared linear memory
Wasmtime is a runtime for WebAssembly. Prior to version 38.0.4, 37.0.3, 36.0.3, and 24.0.5, Wasmtime's Rust embedder API contains an unsound interaction where a WebAssembly shared linear memory could be viewed as a type which provides safe access to the host Rust to the contents of the linear...
EUVD-2025-135754
Malicious code in tearich-new npm...
EUVD-2025-135755
Malicious code in tearich-new npm...
EUVD-2025-135742
Malicious code in tearich-new5 npm...
EUVD-2025-135737
Malicious code in tearich-new8 npm...
MAL-2025-178988 Malicious code in tearich-new6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18a55c742066d674693fac46ce718483fa9f4c3578c07fa0cf800bc89d5ea82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-172911 Malicious code in anidata-hadits-ria (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c92dbfacd2d91e3c4795764553310b0d132743aed4cd86d81d0a4ae6b36278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in @oppo25/teanager (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb71f121e863eff573f53cefccff448ce09432c675c576d71b7ccce08e11fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-153589 Malicious code in avomainah-frid-fafuada (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744dc867691707e4ea91b083c43cea94257ec233b7c42c95d8c659fa80c36840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-170508 Malicious code in verify-technical-bisa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6eec2766ab6b56ea02aff183e67137cb626df3df8958bf17be93991b153af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-151524 Malicious code in abu-poke17 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4494c5bf46e77a1e9137c00d3925bc43e22aab55f297b9a213220659cb6b5100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145273 Malicious code in nashira-farout-sass-loader-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5d9425595d1a523a7abe4f4f6cb677814185a26cbbe69eb2ba49c417075590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in betelgeuse-scorpius-postcss-loader-telesto (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3427e7143da6bb276367048b0c5b5503a017feeaf6621d126c4520ebf2085c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117207
Malicious code in new-azure-grouse npm...
EUVD-2025-117206
Malicious code in new-salmon-gamefowl npm...
Malicious code in new-azure-grouse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da81101753f640bb6bb99ef7b9b99d6b8cff26989321016e680c4664214d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in riana-rojak3-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8ebd7035c31c9b33ac4c9030f24fb3ad1eb5462d47cae6a90cf678105f7195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-126663 Malicious code in galih-empal80-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21b36d1ab115fad0b8a8d5d41e2a97d42e10e2284a40de96330c46396f01111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-123836 Malicious code in umi-taiwan38-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27752239af322d74a42241b1212497c9563f4dbb64faec9a82628dc2a9286333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...