278428 matches found
EUVD-2025-141423
Malicious code in hunimi-satihu-anagi npm...
EUVD-2025-139175
Malicious code in nuyar-adar-bid npm...
Malicious code in hokage-21 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4424e8404da671e20f58b1df67ed3e9a2f3923b9edf1b88ec65f8514ab92590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in godi-tufja-in (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 787187267cce8387534bc7f62592c1953e12396f0bbdf1ae313936efa1e08f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-142804
Malicious code in buta-fs0boiuna-gauafiooifa npm...
EUVD-2025-135534
Malicious code in thambi-vers-vesd npm...
EUVD-2025-139029
Malicious code in poglymer-ogahih-faigafc npm...
EUVD-2025-141541
Malicious code in hitachi-poke96 npm...
EUVD-2025-135286
Malicious code in tray-uozp-eraty npm...
Malicious code in poglymer-ognagh-ami (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599504053a22e8e6443da4a3c5c51c7c24bf531255ec749ff10653077b8ebde5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-138395
Malicious code in polymer-avoafifa-faga npm...
Malicious code in nuilva-bavaim-madibvacvo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 299925943917168945a6e8bca08adc53d36811ed59f8e631de1093dfbf917f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-177896 Malicious code in polymer-butyafsa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed97e4950ae8c5679fb7a2c46bcda1d41c15412e97684ecb1bdf0024a8a35bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-178142 Malicious code in polymer-tusy-sesrus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d317fda58b1b757c4711fbbd7cc1b8906bd35d8e9b2b99f8924abc315603d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-173238 Malicious code in buis-suinana-mamovfa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f397936297864215b702725af63d508c6e9ab1b42f57b0c362986d502117ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-172902 Malicious code in anidata-hadis-re (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24deaee11dc66c42010f3f218a3c6b60ac2e4375effe64ebef41f4d4cebfa508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-61830
Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install...
EUVD-2025-131923
A maliciously crafted JPG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...
EUVD-2025-131922
A maliciously crafted DWG file, when parsed through Autodesk 3ds Max, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...