Exploit for CVE-2025-66478

Next.js RSC RCE Scanner CVE-2025-66478 A command-line scann...

EUVD-2025-138575

Malicious code in polymer-afajif-rod npm...

EUVD-2025-138685

Malicious code in polymer-aajf-rod npm...

Malicious code in polymer-af-rod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27c822c670493ea25f440e6eaf47abd8f51bc885dbb196b2e56a190f39e532b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138684

Malicious code in polymer-aajif-rod npm...

Malicious code in polymer-aajf-rod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ff9e1f0e90bd6109d40516d12f27cf1b6309724457ac152816d2d5e78e07ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139097

Malicious code in nuyar-dad-rod npm...

EUVD-2025-138642

Malicious code in polymer-af-rod npm...

Malicious code in polymer-aajif-rod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fcfe396af04e2bd235a6d3ae7e1e00716753ce77272fd490ef5f20bf488851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177595 Malicious code in polymer-af-rod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27c822c670493ea25f440e6eaf47abd8f51bc885dbb196b2e56a190f39e532b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138440

Malicious code in polymer-ajf-rod npm...

Malicious code in polymer-ajf-rod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afd7fc9834890fd3ddacb44363f981ae20489d5d6efe1822df83b915cc4082a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2023-2654

Malicious code in bioql PyPI...

Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Multicloud Management

Summary Multiple vulnerabilities were addressed in IBM Cloud Pak for Multicloud Management version 2.3 Fix Pack 10 Vulnerability Details CVEID:CVE-2024-28176 DESCRIPTION: Node.js jose module is vulnerable to a denial of service, caused by a flaw during JWE Decryption operations. By sending a...

A Bootiful Podcast: Spring creator and cofounder, Dr. Rod Johnson

In this wide-ranging interview, I finally sit down one-on-one and talk to Dr. Rod Johnson, the creator of Spring, entrepreneur, venture capitalist, engineer, father, Kotlin fan, AI researcher, and musician, about this, that, and everything in between, fresh off our recent SpringOne presentation o...

This Week in Spring - August 13th, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's Tuesday and work is well underway to prepare for the huge SpringOne event in Las Vegas in just a few short week's time! I'm elated! So, let's get this roundup on the road so I can get back to the preparation frenzy...

Malicious code in divining-rod (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Security Bulletin: IBM Analytics Content Hub is affected by security vulnerabilities

Summary Security Bulletin: IBM Analytics Content Hub is affected, but not classified as vulnerable, based on current information, to vulnerabilities in Open Source Software. IBM Analytics Content Hub has addressed the applicable CVEs by upgrading the vulnerable libraries. Vulnerability Details...

This Week in Spring - May 14th, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring! This week's highlights in the Spring ecosystem emphasize the ongoing advancements and applications of Spring AI. The discussions range from exploring the impressive VectorStore abstraction and enhanced structured output suppo...

Security Bulletin: Common vulnerabilities fixed in Cloudera Data Platform 7.1.9 HF2

Summary Fixes to common vulnerabilities discovered in Cloudera Data Platform 7.1.9 are available to download from Cloudera. Vulnerability Details CVEID:CVE-2023-41080 DESCRIPTION: Apache Tomcat could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in...