Malicious code in apricot-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8622df5162d8caedfeb34a99f2ed1dd87f12f1a7acf692bd9b3240381ddb249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75079

Malicious code in accusedhaddock-notthedevs npm...

EUVD-2025-76066

Malicious code in papsdaya-notthedevs npm...

EUVD-2025-76963

Malicious code in enviousmuskox-notthedevs npm...

EUVD-2025-75937

Malicious code in protectivewildebeest-notthedevs npm...

EUVD-2025-76423

Malicious code in lesserpeafowl-notthedev npm...

CVE-2025-13023

Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

PT-2025-46459

Name of the Vulnerable Software and Affected Versions Windows Speech affected versions not specified Description An issue exists where sensitive information is inserted into sent data within Windows Speech. This could allow an authorized attacker to disclose information locally. Recommendations A...

CVE-2025-13015

Spoofing issue in Firefox. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30...

CVE-2025-13026

Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

CVE-2025-13021

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

CVE-2025-13020

Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13025

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

CVE-2025-13027

Memory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

CVE-2025-13024

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

CVE-2025-59777

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service DoS...

CVE-2025-12919

A vulnerability was detected in EverShop up to 2.0.1. Affected is an unknown function of the file /src/modules/oms/graphql/types/Order/Order.resolvers.js of the component Order Handler. The manipulation of the argument uuid results in improper control of resource identifiers. The attack may be...

MAL-2025-55020 Malicious code in reactjs-fabric (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b531a9e3325f1fd726f8701788421a371bdc906c43ce0936034102f34f7d18e8 The package reactjs-fabric was found to contain malicious code. Source: ghsa-malware caed8c64b1139916ddbdb9d303208e80711537ff2e907c8533c12e07ae75cfaf...

MAL-2025-55017 Malicious code in @mts-ds/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0112c17ea22a1384f1973813b785859e61805e29b2027b835dfa81c022bd846e The package @mts-ds/icons was found to contain malicious code. Source: ghsa-malware b51afa604dd61e1408dc95f628c00b6b379d7191214d2b77258a2a97f0cb38e4...

MAL-2025-49729 Malicious code in dandh811 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19da138a15aafecca5e956762f4d1408b284e452f2afc522d2fe1e8f9549a95d The package dandh811 was found to contain malicious code. Source: ghsa-malware ff1136cf9e4afdd278837f2b23779df88ca82c593d3a3e063dab99161adc3f56 Any...