CVE-2025-60694

A stack-based buffer overflow exists in the validatestaticroute function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The function improperly concatenates user-supplied CGI parameters routeipaddr03, routenetmask03, routegateway03 into fixed-size buffers v6,...

CVE-2025-64525

Astro is a web framework. In Astro versions 2.16.0 up to but excluding 5.15.5 which utilizeon-demand rendering, request headers x-forwarded-proto and x-forwarded-port are insecurely used, without sanitization, to build the URL. This has several consequences, the most important of which are:...

EUVD-2025-178791

Malicious code in gamma-good-socket-enum-route npm...

EUVD-2025-177409

Malicious code in orchestrate-grid-dog-air-route npm...

EUVD-2025-180189

Malicious code in await-float-optimize-route-omicron npm...

EUVD-2025-176327

Malicious code in small-route-assert-compile-interface npm...

EUVD-2025-176828

Malicious code in quick-validate-transpile-cluster-route npm...

EUVD-2025-175621

Malicious code in web-route-final-nu-route npm...

EUVD-2025-175746

Malicious code in user-route-fast-easy-sigma npm...

EUVD-2025-179762

Malicious code in char-bundle-route-refactor-async npm...

EUVD-2025-179419

Malicious code in daemon-container-rain-route-reject npm...

EUVD-2025-176587

Malicious code in route-proxy-alpha-export-monitor npm...

MAL-2025-189656 Malicious code in star-route-query-export-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20beac557c34a749310f87e0f1b74f8044729c51c474177886ce1fc005f2d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186139 Malicious code in chi-route-good-integer-grep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf3808047bfb574e402fb26150085e65281d4b7fcfa053f879b3931c17b6b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178881

Malicious code in float-new-route-benchmark-async npm...

Malicious code in quick-validate-transpile-cluster-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee10f0bcabc32d9ac66632a283a2ba700f31cfdfd2a8f280a980368720bf754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180125

Malicious code in bash-load-fast-unix-route npm...

EUVD-2025-180204

Malicious code in authorize-route-signal-grid-cache npm...

EUVD-2025-177828

Malicious code in minify-permission-xi-route-export npm...

Malicious code in final-daemon-route-boolean-permission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f8334b78cd08ab5b888c2e351b37dd8221311c010e1d1b12e973d3ac9d0367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...