EUVD-2025-114376

Malicious code in dotenv-parse-variables-proxima-markdownlint-meteor npm...

EUVD-2025-114389

Malicious code in dotenv-parse-variables-eris-xenon-postcss npm...

EUVD-2025-114476

Malicious code in development-slidev-dotenv-parse-variables-sedna npm...

EUVD-2025-121967

Malicious code in sirius-jsonp-dotenv-parse-variables-perseus npm...

EUVD-2025-113474

Malicious code in fornax-miranda-dotenv-parse-variables-proxima npm...

EUVD-2025-113441

Malicious code in foundation-sagitta-meissa-dotenv-parse-variables npm...

EUVD-2025-123286

Malicious code in promise-delphinus-dotenv-parse-variables-ursa npm...

EUVD-2025-121612

Malicious code in stream-dotenv-parse-variables-izar-antares npm...

EUVD-2025-113458

Malicious code in fornax-tailwindcss-start-dotenv-parse-variables npm...

EUVD-2025-115766

Malicious code in callisto-levels-subscription-dotenv-parse-variables npm...

EUVD-2025-111680

Malicious code in lint-centaurus-vuetify-dotenv-parse-variables npm...

EUVD-2025-122331

Malicious code in sagitta-development-deneb-dotenv-parse-variables npm...

Malicious code in eclipse-nightmare-framework-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d0c499421d82973f4df93cf56abf3d08dc50da7eed95c154c8b6566c2cc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114384

Malicious code in dotenv-parse-variables-meteor-gridsome-eleventy npm...

MAL-2025-139393 Malicious code in antares-cache-andromeda-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a69f1e0e67e5d014f4810d287a413d9c3f360df647b2978a8a65cd71af5f0a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141715 Malicious code in dotenv-parse-variables-dactyl-hermes-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553918f29ad698a225d2b077fc60b1d34a4522e23490977aae6619892944fad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data The MT7921 driver no longer uses eeprom.data, but the relevant code has not been removed completely since commit 16d98b548365 "mt76: mt7921: rely on...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990867)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990867 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix potential RCU dereference issue in wilcparsejoinbssparam In the...

CVE-2025-64502

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0-alpha....

Amazon Linux 2 : oci-add-hooks, --advisory ALAS2ECS-2025-080 (ALASECS-2025-080)

The version of oci-add-hooks installed on the remote host is prior to 0-0.5.20200504git325a340. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2025-080 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values...