1998 matches found
MAL-2025-122400 Malicious code in old_hawk_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67c8b1b2564e18800bff7f76109194410cfd22c8e7db0a052a7483e8e1001317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74405
Malicious code in oldnightingalelime-46 npm...
MAL-2025-106718 Malicious code in old_reptile-apptea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d48d8982a57ff9fc041d59f48a76df242529e76033dd09633aca55db6f891f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76134
Malicious code in oldhawk-smiletea npm...
MAL-2025-106716 Malicious code in old_hawk-smiletea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47530d23e2e79968cf5010200de1731fd9ca032bfb2b872f52361853ebb80399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76132
Malicious code in oldreptile-apptea npm...
Malicious code in old_duck_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5838601645a9b2a62f11876b4c3f6f64098b9b5a076c665cb7276c74aa505e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in old_unicorn_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ed7cb98b6b8f2a4a7ac4832448c129cc5163436cd80c31d7acd24f186b471e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-62808
Malicious code in oldunicornz3n npm...
MAL-2025-95744 Malicious code in old_carp_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c6cef7141eba3a29814b1bd3ee560e1422a6608497b5e4cb9637dff60c1c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-69710 Malicious code in old-peach-crocodile (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96238dc96f227e1e070f9a42d86ff2abba25b4e9ca0b80e7eb4639f7f8d52bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52938
Malicious code in old-peach-hummingbird npm...
EUVD-2025-52939
Malicious code in old-peach-crocodile npm...
Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20558)
The remote Oracle Linux 10 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20558 advisory. 6.12.0-103.40.4.2.el10uek - x86/vmscape: Warn when STIBP is disabled with SMT Pawan Gupta Orabug: 38343659 - x86/bugs: Move cpubugssmtupdate down Pawan...
CVE-2025-64513 Milvus Proxy has Critical Authentication Bypass Vulnerability
Milvus is an open-source vector database built for generative AI applications. An unauthenticated attacker can exploit a vulnerability in versions prior to 2.4.24, 2.5.21, and 2.6.5 to bypass all authentication mechanisms in the Milvus Proxy component, gaining full administrative access to the...
CVE-2025-64183
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.2.0 through 3.2.4, 3.3.0 through 3.3.5, and 3.4.0 through 3.4.2, there is a use-after-free in PyObjectStealAttrString of pyOpenEXRold.cpp...
CVE-2025-12728
Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-12428
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...