CVE-2025-24862

Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...

CVE-2025-24862

Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...

CVE-2025-24848

Protection mechanism failure for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This...

EUVD-2025-89538

Malicious code in passivejellyfishz3n npm...

EUVD-2025-78635

Malicious code in passivepossumz3n npm...

EUVD-2025-80976

Malicious code in passivehedgehog0xrequest npm...

MAL-2025-106936 Malicious code in passive_hedgehog_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e9f2288b963cd0770fbe6c0aecb013e3f7224ba6ab9d9143768f4973666d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-68583

Malicious code in passivebearz3n npm...

MAL-2025-106933 Malicious code in passive_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f53589ed7076315ad66bd9ef40682b835c9c8ab87ad983f9e454b74e3566ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71426

Malicious code in passiveferretz3n npm...

EUVD-2025-62698

Malicious code in passivesolez3n npm...

EUVD-2025-62700

Malicious code in passivemammalz3n npm...

MAL-2025-95853 Malicious code in passive_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e1716d173478e33753d87db3704fd59fb4a1909d04c266f3b26cf35b2a9450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passive-tan-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9646bf6982d7520b1864edb2c33dc58a6b0b9dd0ce5a06aa7202ada2dbdae718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52811

Malicious code in passive-tan-aphid npm...

EUVD-2025-52810

Malicious code in passive-white-termite npm...

EUVD-2025-52812

Malicious code in passive-lime-fly npm...

EUVD-2025-57884

Malicious code in passivemeadowlarkz3n npm...

PT-2025-46396

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description A protection mechanism failure exists in some IntelR CIP software. This issue, occurring within Ring 3: User Applications, may allow an unprivileged software adversary with ...

Malicious code in passive_rooster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee005a707f4125311c55cdd1f2cc7ee6775341d305af2f724b537365b23e163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...