6688 matches found
EUVD-2025-178055
Malicious code in load-abstract-final-static-pipe npm...
EUVD-2025-179246
Malicious code in double-uglify-long-static-cron npm...
EUVD-2025-178159
Malicious code in lambda-byte-sigma-static-reject npm...
EUVD-2025-178196
Malicious code in key-static-authorize-authenticate-quick npm...
EUVD-2025-176211
Malicious code in static-view-warn-cluster-catch npm...
EUVD-2025-180190
Malicious code in await-file-public-transpile-static npm...
CVE-2025-60694
A stack-based buffer overflow exists in the validatestaticroute function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The function improperly concatenates user-supplied CGI parameters routeipaddr03, routenetmask03, routegateway03 into fixed-size buffers v6,...
CVE-2025-60694
CVE-2025-60694 affects Linksys E1200 v2 routers running firmware 2.0.11.001_us. A stack-based buffer overflow occurs in httpd's validate_static_route function, where CGI params route_ipaddr_0~3, route_netmask_0~3, and route_gateway_0~3 are concatenated into fixed-size buffers (v6, v10, v14) witho...
EUVD-2025-117064
Malicious code in static-red-wasp npm...
MAL-2025-139038 Malicious code in static-red-wasp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a62f8b52870a99829604b5d8e9dec5ec65b122e1e9689702a7625a69dc329e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Taught by the Flawed: How Dataset Insecurity Breeds Vulnerable AI Code
AI programming assistants have demonstrated a tendency to generate code containing basic security vulnerabilities. While developers are ultimately responsible for validating and reviewing such outputs, improving the inherent quality of these generated code snippets remains essential. A key...
EUVD-2025-102081
Malicious code in staticbuzzardz3n npm...
EUVD-2025-102080
Malicious code in statichummingbirdz3n npm...
EUVD-2025-94932
Malicious code in staticlemmingz3n npm...
EUVD-2025-88671
Malicious code in staticlampreyz3n npm...
Malicious code in static_lamprey_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18b4d264beba87e06682be89e60c48071b2b39454e0092ea63303cfd7146c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-78228
Malicious code in staticorcaz3n npm...
MAL-2025-109086 Malicious code in static_wombat_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6185b105e09c1ac912ff98b39c66991e53a18cc35b2b3914fbd3d7f9faade5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...