278149 matches found
Malicious code in buis-masi-mabai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485ae29e4e99688b9d13b3e53b39aee4b57a49730f2c5a7f200ec1222f3c3721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-142804
Malicious code in buta-fs0boiuna-gauafiooifa npm...
EUVD-2025-139175
Malicious code in nuyar-adar-bid npm...
EUVD-2025-135534
Malicious code in thambi-vers-vesd npm...
Malicious code in nuilva-bavaim-madibvacvo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 299925943917168945a6e8bca08adc53d36811ed59f8e631de1093dfbf917f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hokage-21 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4424e8404da671e20f58b1df67ed3e9a2f3923b9edf1b88ec65f8514ab92590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-173238 Malicious code in buis-suinana-mamovfa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f397936297864215b702725af63d508c6e9ab1b42f57b0c362986d502117ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-172902 Malicious code in anidata-hadis-re (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24deaee11dc66c42010f3f218a3c6b60ac2e4375effe64ebef41f4d4cebfa508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-178142 Malicious code in polymer-tusy-sesrus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d317fda58b1b757c4711fbbd7cc1b8906bd35d8e9b2b99f8924abc315603d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-139029
Malicious code in poglymer-ogahih-faigafc npm...
CVE-2025-61830
Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install...
EUVD-2025-131923
A maliciously crafted JPG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...
EUVD-2025-131922
A maliciously crafted DWG file, when parsed through Autodesk 3ds Max, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
EUVD-2025-131909
Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...
EUVD-2025-131912
The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...
MAL-2025-172303 Malicious code in augis-pomo9r-nusfi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c8b8f9965cc0ed1b2180348071247f4d2da865605bd0ddf458193ef97283b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-172607 Malicious code in verts-otimon-ogia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d872cb297818c843979df19ba96cb5749ce1d6e9959133537ca33c1899969b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in alyssaadams (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0312a194e9a9a5d8e68d55243e4e4137dd749dcc1debfacca229961ba84986fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...