5969 matches found
EUVD-2025-124313
Malicious code in non-blocking-dotenv-safe-got-castor npm...
EUVD-2025-112392
Malicious code in iota-dotenv-safe-webdriver-mocha-mutation npm...
Malicious code in remark-dotenv-safe-betelgeuse-testcafe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f67536623e6020a2084816b1ce2ffd1af360a6738503293222726a849783479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dotenv-safe-nconf-gemini-vortex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdbfcb6b83ef7147b4041123d4274295e736f9b5059e57e55db63cc993bb9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147991 Malicious code in slides-non-blocking-dotenv-safe-loopback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0850f47bc6fffbed41e4a34730cecc0e53621b63abb4a3b3199ba5f61ad97ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141779 Malicious code in dotenv-safe-transport-corvus-hydra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141777 Malicious code in dotenv-safe-semantic-ui-corvus-release-it (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542b8da9f5521fb24d5e53f53645f4fb810e158f42eab400a7d5badcd6f44895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149547 Malicious code in wolf-dotenv-safe-init-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f276f80847acdf6e724ff67d80fb8c48fe61319092838a09349c533b099d4e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145996 Malicious code in pavo-dotenv-safe-cosmos-cordelia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716d370389a73f5f2d8bb1d652817fcd01c99cb04fdd4add1575b54b2c1d2d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143814 Malicious code in janus-jekyll-parcel-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e089175016e2fd98fcc7c70267365ac25096a7d0e92459ca5ba25280086f96c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139449 Malicious code in antares-xanadu-delphinus-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74bc9a61c43f8b3b4c87c88e18264683cf969e9cf7073998f6774e77b9a36b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141747 Malicious code in dotenv-safe-dactyl-mira-karma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ec1957a8e508198687aa6db75cbf6436cd19dca66de00383f10e5b0c6ddd76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141765 Malicious code in dotenv-safe-norma-hydra-pulsar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-11756
Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...
kernel: idpf: check error for register_netdev() on init
In the Linux kernel, the following vulnerability has been resolved: idpf: check error for registernetdev on init Current init logic ignores the error code from registernetdev, which will cause WARNON on attempt to unregister it, if there was one, and there is no info for the user that the creatio...
EUVD-2025-75753
Malicious code in safequokka-appteadev npm...
EUVD-2025-75755
Malicious code in safeclam-teagooddev npm...
MAL-2025-108333 Malicious code in safe_porpoise-toolteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56495f3f6bb44aaa642203075ddea7af1f6a9a26c22c93ae9a690a95e2ef380c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in safe_clownfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1adf00a281321d10702ec9729e71843eabe528d2290a2d27fc86cdc79a9028cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...