5043 matches found
MAL-2025-185549 Malicious code in arcturus-run-script-hydrogeology-gatsby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85308b7f547a69be0ec866ce936c922952149183b16feab778b8f5b68c64d58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187149 Malicious code in genomics-run-script-auth-neptune (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27853c93677fec2a5030fe143a9a6b4d812b32a1ed874a06ed9ea9f4580b5743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178404
Malicious code in init-parcel-run-script-hugo npm...
EUVD-2025-176584
Malicious code in run-script-koa-json-cli npm...
EUVD-2025-176580
Malicious code in run-script-zenith-mantle-blaze npm...
MAL-2025-185458 Malicious code in antares-aether-run-script-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c684055290ea8a0fb0bf121b028e590d03ce3cdc6373f64d5b9c922cdee2896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186529 Malicious code in delphinus-run-script-deneb-query (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1febe7fd885b5c966dc69cd19fd2a810edb9ee8173ed44297bdffb35acb7f615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Generex UPS Adapter CS141 Authenticated Remote Code Execution (CVE-2022-42457)
Generex CS141 through 2.10 allows remote command execution by administrators via a web interface that reaches runupdate in /usr/bin/gxserve-update.sh e.g., command execution can occur via a reverse shell installed by install.sh. This plugin only works with Tenable.ot. Please visit...
UBUNTU-CVE-2025-40116
In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthreadrun function returns error pointers so the max3421hcd-spithread pointer can be either error pointers or NULL. Check for both before dereferencing i...
CVE-2025-40123 bpf: Enforce expected_attach_type for tailcall compatibility
In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expectedattachtype for tailcall compatibility Yinhao et al. recently reported: Our fuzzer tool discovered an uninitialized pointer issue in the bpfprogtestrunxdp function within the Linux kernel's BPF subsystem. This...
EUVD-2025-120322
Malicious code in xanadu-run-script-ceres-loopback npm...
EUVD-2025-120242
Malicious code in xenos-run-script-weywot-exec npm...
EUVD-2025-121161
Malicious code in transform-lyra-run-script-cosmiconfig npm...
EUVD-2025-120568
Malicious code in webdriver-mocha-run-script-kastra-dactyl npm...
EUVD-2025-120503
Malicious code in websockets-run-script-websockets-mira npm...
EUVD-2025-122020
Malicious code in server-passport-run-script-acamar npm...
EUVD-2025-121687
Malicious code in sqlite-run-script-transform-cordelia npm...
EUVD-2025-121645
Malicious code in start-run-script-sagitta-proxima npm...