EUVD-2025-38981

Malicious code in kiki-kupat85-riris npm...

EUVD-2025-41028

Malicious code in fitri-lodeh52-sluey npm...

EUVD-2025-40088

Malicious code in cindy-tahu71-sukiwir npm...

EUVD-2025-39471

Malicious code in tania-mieaceh71-ruro npm...

EUVD-2025-39905

Malicious code in dian-rangi90-ruro npm...

EUVD-2025-40655

Malicious code in andi-papeda32-sluey npm...

EUVD-2025-39277

Malicious code in utomo-nasicampur93-ruro npm...

EUVD-2025-39439

Malicious code in tiara-bika81-ruro npm...

MAL-2025-50327 Malicious code in erick-mangut23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12261306ae7760f92a1ec99da157bcabafcaf041d2f0261fddd1e8c93aa63be6 The package erick-mangut23-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

EUVD-2025-39997

Malicious code in dewanto-kue27-breki npm...

EUVD-2025-40484

Malicious code in bayu-rangginang13-sukiwir npm...

EUVD-2025-39187

Malicious code in wati-kacang3-sluey npm...

EUVD-2025-40128

Malicious code in cindy-ketoprak1-sluey npm...

EUVD-2025-40921

Malicious code in tomi-sego3-breki npm...

Malicious code in yuni-nasi3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975afb3d443e6de6d98cf0f41126a87e99818e2a9b4be92b98e10154671a167 The package yuni-nasi3-breki was found to contain malicious code...

Malicious code in yuni-sate78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcb230a98a9d43161f95fcfbc6648b91032db7d52306034464ef9f6442c926f8 The package yuni-sate78-ruro was found to contain malicious code...

MAL-2025-49556 Malicious code in zul-oblok39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a5ae8a15c1cdd8bcd1edce0af4020ebddef4e3714efbf6f460b21a1a9a3b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64486

calibre is an e-book manager. In versions 8.13.0 and prior, calibre does not validate filenames when handling binary assets in FB2 files, allowing an attacker to write arbitrary files on the filesystem when viewing or converting a malicious FictionBook file. This can be leveraged to achieve...

CVE-2025-12907

Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. Chromium security severity: Low...

EUVD-2025-38289

An issue was discovered in rymcu forest thru commit f782e85 2025-09-04 in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts...