EUVD-2025-175661

Malicious code in warn-shell-async-virtualize-mu npm...

Malicious code in emulate-link-shell-async-double (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2c1b630e620fe1fa496bedbb43c8e83b304ef52edb5caa9ecd63d1dfbb13b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176475

Malicious code in sed-node-shell-long-authorize npm...

EUVD-2025-176392

Malicious code in short-shell-data-private-bash npm...

MAL-2025-189233 Malicious code in rho-object-test-char-shell (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9efa550c99c9e9618cc08596bdd81ee7ec3ef19c63291d58ac245ccc618c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176403

Malicious code in shell-process-eta-star-omicron npm...

EUVD-2025-176407

Malicious code in shell-class-encrypt-info-zeta npm...

EUVD-2025-178595

Malicious code in hash-warn-async-private-shell npm...

EUVD-2025-176642

Malicious code in rho-object-test-char-shell npm...

EUVD-2025-176406

Malicious code in shell-double-gamma-shell-kappa npm...

EUVD-2025-180081

Malicious code in big-data-shell-omega-reject npm...

EUVD-2025-177218

Malicious code in phi-shell-old-old-pi npm...

EUVD-2025-180149

Malicious code in bad-hash-shell-interpret-compress npm...

EUVD-2025-178442

Malicious code in import-uglify-shell-assert-key npm...

EUVD-2025-179160

Malicious code in emulate-link-shell-async-double npm...

EUVD-2025-176404

Malicious code in shell-omicron-dog-bash-simple npm...

EUVD-2025-176470

Malicious code in sed-shell-cat-encrypt-parse npm...

EUVD-2025-176405

Malicious code in shell-integer-optimize-log-promise npm...

PT-2025-46795

Name of the Vulnerable Software and Affected Versions Supermicro BMC Insyde SMASH affected versions not specified Description The Insyde SMASH shell program within Supermicro BMC contains a stacked-based overflow issue. This flaw could allow for remote code execution. Recommendations At the momen...

CVE-2025-60701

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub433188 function in prog.cgi stores user-supplied email configuration parameters EmailFrom, EmailTo, SMTPServerAddress, SMTPServerPort, AccountName in NVRAM v...