Malicious code in epic-node-services-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a56c7af2b6009234c70bfecc0a432077b5d114c759db50acb84b2841c2ee452 The package epic-node-services-common was found to contain malicious code...

Malicious code in epic-react-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b94ef197699c924d3128263cbe7437ace4318b5dc44b80d8e1a0e5d1fc5946 The package epic-react-common was found to contain malicious code...

Malicious code in epic-sso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa7c7d03ea60912c6fed9d1f5f9c5c3900d85037444f871e74989e1e39a0682 The package epic-sso was found to contain malicious code...

Malicious code in epic-ue-spotlight (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd396aa1bdd76e462e346d6e3ab3dd2396963c3c215ff74a6a7c8aaff2ffebe0 The package epic-ue-spotlight was found to contain malicious code...

EUVD-2025-37070

Malicious code in eslint-config-epic npm...

EUVD-2025-37179

Malicious code in epic-adminportal-frontend npm...

EUVD-2025-37153

Malicious code in epic-dynamo-utils npm...

MAL-2025-49166 Malicious code in epic-node-blog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4207720525d69e9c09afb392295f1566d480abc128a98065be73bb7044e93291 The package epic-node-blog was found to contain malicious code...

EUVD-2025-37171

Malicious code in epic-comment-rating-frontend npm...

GO-2025-4055 Mattermost Server's Session ID and Session Token are potentially compromised in github.com/mattermost/mattermost-server

Mattermost Server's Session ID and Session Token are potentially compromised in github.com/mattermost/mattermost-server...

CVE-2024-45162

A stack-based buffer overflow issue was discovered in the phddns client in Blu-Castle BCUM221E 1.0.0P220507 via the password field...

node-tar 安全漏洞

node-tar is a package for file compression/decompression by isaacs individual developers. A security vulnerability exists in node-tar version 7.5.1, which stems from the return of uninitialized memory contents when reading the contents of a tar entry using .t, which could lead to information...

EUVD-2025-36884

Malicious code in operations-packages npm...

EUVD-2025-36789

Malicious code in @gitlab-lsp/pkg-1 npm...

CVE-2025-58058 affecting package jx for versions less than 3.10.182-3

CVE-2025-58058 affecting package jx for versions less than 3.10.182-3. A patched version of the package is available...

CVE-2023-0778 affecting package podman for versions less than 5.6.1-2

CVE-2023-0778 affecting package podman for versions less than 5.6.1-2. An upgraded version of the package is available that resolves this issue...

EUVD-2025-36401

Malicious code in tailwind-merge-setting npm...

SUSE CVE-2025-12198

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent expected and...

SUSE CVE-2025-12199

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent expected and...

SUSE CVE-2025-12200

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent expected and...