4123 matches found
EUVD-2025-179227
Malicious code in dynamo-run-script-jasmine-kuiperbelt npm...
EUVD-2025-176585
Malicious code in run-script-juno-supernova-commitlint npm...
EUVD-2025-180341
Malicious code in arcturus-nuxtjs-cordelia-run-script npm...
EUVD-2025-175942
Malicious code in thuban-run-script-octans-eslint npm...
Malicious code in redshift-run-script-chai-koa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5286f36483bbe7228cd4a81c89c18519248a77be151e2d05f127fcabe320b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176857
Malicious code in quark-dotenv-safe-run-script-planckscale npm...
EUVD-2025-176899
Malicious code in pulsar-run-script-process-io npm...
EUVD-2025-176586
Malicious code in run-script-australis-quito-repository npm...
EUVD-2025-179044
Malicious code in eslint-config-sirius-run-script-sublimation npm...
EUVD-2025-178404
Malicious code in init-parcel-run-script-hugo npm...
EUVD-2025-179822
Malicious code in centaurus-browserify-run-script-interferometry npm...
EUVD-2025-180513
Malicious code in acamar-prettier-stylelint-run-script-hapi npm...
MAL-2025-185549 Malicious code in arcturus-run-script-hydrogeology-gatsby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85308b7f547a69be0ec866ce936c922952149183b16feab778b8f5b68c64d58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Generex UPS Adapter CS141 Authenticated Remote Code Execution (CVE-2022-42457)
Generex CS141 through 2.10 allows remote command execution by administrators via a web interface that reaches runupdate in /usr/bin/gxserve-update.sh e.g., command execution can occur via a reverse shell installed by install.sh. This plugin only works with Tenable.ot. Please visit...
UBUNTU-CVE-2025-40116
In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthreadrun function returns error pointers so the max3421hcd-spithread pointer can be either error pointers or NULL. Check for both before dereferencing i...
CVE-2025-40123 bpf: Enforce expected_attach_type for tailcall compatibility
In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expectedattachtype for tailcall compatibility Yinhao et al. recently reported: Our fuzzer tool discovered an uninitialized pointer issue in the bpfprogtestrunxdp function within the Linux kernel's BPF subsystem. This...
Malicious code in odin-run-script-scripts-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79508cd48643557f134d37f5b6eb9f3da8274a39beb434b88d43ed6e801e5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116712
Malicious code in antares-antares-run-script-triton npm...