CVE-2025-60694

CVE-2025-60694 affects Linksys E1200 v2 routers running firmware 2.0.11.001_us. A stack-based buffer overflow occurs in httpd's validate_static_route function, where CGI params route_ipaddr_0~3, route_netmask_0~3, and route_gateway_0~3 are concatenated into fixed-size buffers (v6, v10, v14) witho...

EUVD-2025-117064

Malicious code in static-red-wasp npm...

MAL-2025-139038 Malicious code in static-red-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a62f8b52870a99829604b5d8e9dec5ec65b122e1e9689702a7625a69dc329e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Taught by the Flawed: How Dataset Insecurity Breeds Vulnerable AI Code

AI programming assistants have demonstrated a tendency to generate code containing basic security vulnerabilities. While developers are ultimately responsible for validating and reviewing such outputs, improving the inherent quality of these generated code snippets remains essential. A key...

EUVD-2025-102080

Malicious code in statichummingbirdz3n npm...

EUVD-2025-102081

Malicious code in staticbuzzardz3n npm...

EUVD-2025-94932

Malicious code in staticlemmingz3n npm...

EUVD-2025-88671

Malicious code in staticlampreyz3n npm...

Malicious code in static_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18b4d264beba87e06682be89e60c48071b2b39454e0092ea63303cfd7146c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78228

Malicious code in staticorcaz3n npm...

MAL-2025-109086 Malicious code in static_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6185b105e09c1ac912ff98b39c66991e53a18cc35b2b3914fbd3d7f9faade5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73536

Malicious code in staticrodentz3n npm...

EUVD-2025-73534

Malicious code in staticwallabyz3n npm...

EUVD-2025-73540

Malicious code in staticbobcatz3n npm...

EUVD-2025-73538

Malicious code in staticlandfowlz3n npm...

EUVD-2025-66511

Malicious code in staticbaboonz3n npm...

MAL-2025-90743 Malicious code in static_baboon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7b66f882ca8ede2961b0fdf7e8e338626eb643810a01a397d8966e08701fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-66512

Malicious code in staticanacondaz3n npm...

EUVD-2025-51822

Malicious code in static-scarlet-whitefish npm...

MAL-2025-70827 Malicious code in static-scarlet-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab08208f1907de867a4918ca21dc4ece89c3d7620a0d767833dce303e8b590f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...