Malicious code in erwin-pecel48-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281c1e34611c759a2b0888fa8d34bf8d0e40f22336c5e4ff606e1daedefb805d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-46023

Malicious code in ocha-sego72-sukiwir npm...

MAL-2025-57279 Malicious code in kurniawan-sate23-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de5dd53b2d31eca50201628dfc69731157ebb424c6c870567bdafd1dd6edc31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-42418

Malicious code in putri-kue91-sukiwir npm...

Prototype Pollution

ts-fns is vulnerable to Prototype Pollution. The vulnerability is due to insufficient validation of user-supplied keys in the assign function, which allows an attacker to modify the Object.prototype chain and inject arbitrary properties, potentially leading to application crashes, unexpected...

EUVD-2025-43529

Malicious code in laila-sambalado13-devapp npm...

EUVD-2025-43465

Malicious code in mahesa-nasipecel96-sukiwir npm...

EUVD-2025-41628

Malicious code in bambang-semur92-sluey npm...

EUVD-2025-41113

Malicious code in erwin-toge64-sukiwir npm...

EUVD-2025-39315

Malicious code in umi-kolak21-miaww npm...

EUVD-2025-39228

Malicious code in vida-klentik13-riris npm...

MAL-2025-51831 Malicious code in fajar-mangut61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32aa55042889d0042a7a4f0ab7b968ba58df284820aa9e56fba5a624884d934c The package fajar-mangut61-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Lucee Unset Credentials

Lucee web application server may be configured with no credentials. If an attacker setup the default accounts, they could gain unauthorized access to the application and perform arbitrary actions on it. No source data...

MAL-2025-49532 Malicious code in zul-bubur89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99d48465ff8d523b91710a71f5d2b2acb6c7bad3c1815bb47e81ec0909b6818 The package zul-bubur89-breki was found to contain malicious code...

Malicious Package

Overview xss-payload-7n-ctf is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

GO-2025-4024 Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows

Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows...

CVE-2025-56232

GOG Galaxy 2.0.0.2 is affected by a Missing SSL certificate validation vulnerability that enables local-network/MITM interception of update requests, potentially replacing installers or updates with malicious files. The issue is documented across multiple feeds (NVD, Red Hat, CNNVD, EUVD) with no...

CVE-2025-12058 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

Protobuf Maven Plugin protocDigest is ignored when using protoc from PATH

Summary The expected protocDigest is ignored when protoc is taken from the PATH. Details The documentation for the protocDigest parameter says: ... Users may wish to specify this if using a PATH-based binary ... However, when specifying PATH the protocDigest is not actually checked because the co...

EUVD-2025-37741

The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the “PythonInterpreter” class...