EUVD-2025-177536

Malicious code in notify-link-proxy-double-proxy npm...

Malicious code in route-proxy-alpha-export-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ed7ce7a196ba7ed5bc586cfdd287f1bcf2abf295da782560005753652fe5b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175446

Malicious code in yaml-root-xml-process-proxy npm...

EUVD-2025-179212

Malicious code in easy-interpret-big-proxy-scale npm...

EUVD-2025-177426

Malicious code in optimize-proxy-alpha-cache-decompress npm...

EUVD-2025-177830

Malicious code in minify-kappa-proxy-kappa-tau npm...

EUVD-2025-176950

Malicious code in proxy-encode-cache-easy-delta npm...

Malicious code in enum-compress-proxy-thread-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95ef3cbb61db1cbeab2893204a04eaefaa1591655f7dcd34ecb4c43b883a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180262

Malicious code in async-proxy-dog-refactor-nu npm...

EUVD-2025-176951

Malicious code in proxy-decrypt-bad-byte-cat npm...

Malicious code in proxy-encode-cache-easy-delta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71d7168ce33fa33d117ca3dfeb5107315620cdef1a12c36ec833ec3738c04d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mu-dog-proxy-decode-unix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88cdfbf38d06291aae96e832f05b29f00cfd35589943f585837dc348ec6b1fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179114

Malicious code in enum-proxy-sun-omicron-nu npm...

EUVD-2025-176948

Malicious code in proxy-meta-pi-theta-bad npm...

MAL-2025-187677 Malicious code in kernel-promise-proxy-xml-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbcf722d296a805c892de52ff3cd2ad37ac131c515bfb952e27dae7d017d108d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Siemens SIMATIC S7-1500 Use After Free (CVE-2022-43552)

curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can and often do deny such tunnel operations using an appropriate HTTP error response code. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struc...

MTAttack: Multi-Target Backdoor Attacks against Large Vision-Language Models

Recent advances in Large Visual Language Models LVLMs have demonstrated impressive performance across various vision-language tasks by leveraging large-scale image-text pretraining and instruction tuning. However, the security vulnerabilities of LVLMs have become increasingly concerning,...

Siemens SIMATIC S7-1500 Missing Encryption of Sensitive Data (CVE-2019-13057)

An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for certain databases but wants to maintain isolation e.g., for multi-tenant deployments, slapd does not properly stop a rootDN from requesting authorization a...

Siemens SIMATIC S7-1500 Improper Certificate Validation (CVE-2021-28363)

The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy if an SSLContext isn't given via proxyconfig doesn't verify the hostname of the certificate. This means certificates for...

Siemens SIMATIC S7-1500 Heap-based Buffer Overflow (CVE-2023-38545)

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the hostname to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that hostname can be is 255 bytes. If the hostname ...