EUVD-2025-78654

Malicious code in outsidemitez3n npm...

EUVD-2025-81011

Malicious code in outsideaardvark0xrequest npm...

EUVD-2025-81010

Malicious code in outsidebeaver0xrequest npm...

EUVD-2025-71433

Malicious code in outsidehornetz3n npm...

EUVD-2025-62744

Malicious code in outsideboarz3n npm...

EUVD-2025-67914

Malicious code in outsiderhinocerosz3n npm...

EUVD-2025-52863

Malicious code in outside-indigo-bonobo npm...

EUVD-2025-52864

Malicious code in outside-blush-haddock npm...

MAL-2025-66546 Malicious code in npmtest_chenguang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f702a0658de936fc3084652027ce0383b048954aef2f39b5783af8edb2e8c7de The package npmtestchenguang was found to contain malicious code. Source: ghsa-malware c6f729e82fdac96b8daaca470b095362e03a02d531c217553f57ffb104cd93...

EUVD-2025-49672

Malicious code in outsidehalibutz3n npm...

Malicious code in outside_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ab1819229a372b3a7d16974f704a6185f317f12493849b0ec6555038910638a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-45877

Malicious code in outsidesparrowz3n npm...

Malicious code in chai-as-sorted (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0a3502254657767ec819133929d33c2b84f1d9607acc89e9557de2b80e9bed The package chai-as-sorted was found to contain malicious code. Source: ghsa-malware 0a769064bb46785af26b5ee4af98633de26f88bcad7b199c113bdf52940e195a...

Qualcomm DSP service Data Compromise

The vulnerability of the DSP microprogramming system in Qualcomm’s embedded chips lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2025-64184

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

Malicious code in huangming-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53612bb1244997357931275dea1924a477215c7db7ab8297f2fead735926859e The package huangming-demo was found to contain malicious code. Source: ghsa-malware 503c69173f37b1e6d7f159b77bb5f5a3bb677dff293fb44f2a09038a31172fdb...

MAL-2025-49386 Malicious code in tailwindcss-twflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ae450cb567421e91b0d5a8fbe5904a5136ecfcb74a4a78ad0244beac01d011 The package tailwindcss-twflare was found to contain malicious code. Source: ghsa-malware...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the void function in the kernel/rcu/tasks.h module of the synchronization subsystem in Linux multi-threaded kernel systems is related to the execution of operations outside of the memory buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Malicious code in react-tmedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2561617d960be4ee063460a87fe4cded553ec3c3f0258fcaae75a27aa92de3b The package react-tmedia was found to contain malicious code. Source: ghsa-malware eb8db46193d662b789371d3c7670652c9d9dca288f0b99daba2791a3410613cf A...

Malicious code in @bbkkfkk/pre (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c1f8ea16f76d6d90b7428b1448704b5b42f2db84e96945cc9c85237013060e The package @bbkkfkk/pre was found to contain malicious code. Source: ghsa-malware 18fa96a25503e48ec0ab99b483a5e7c4c8acd355e03c509295d39daf6509b21a A...