8576 matches found
EUVD-2025-176215
Malicious code in static-public-omega-abstract-upsilon npm...
MAL-2025-190097 Malicious code in upsilon-socket-cluster-static-eta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c4127e8b9df2359bf4f313e20808bc22f8a6248af19bb410a6350869034d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178196
Malicious code in key-static-authorize-authenticate-quick npm...
EUVD-2025-175780
Malicious code in upsilon-sandbox-static-module-validate npm...
EUVD-2025-180190
Malicious code in await-file-public-transpile-static npm...
EUVD-2025-177621
Malicious code in new-user-static-awk-zeta npm...
EUVD-2025-176535
Malicious code in sandbox-kernel-web-good-static npm...
MAL-2025-187723 Malicious code in lambda-byte-sigma-static-reject (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e512f773e77c8591c7fdc12e28652a7c98180e468e2eaac0b828ba21c83918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186980 Malicious code in final-scale-static-yaml-debug (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ba87a36ae06fd4997f24c35c4cf6157601dad069a9c57e6ae8d43cc88aa435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176213
Malicious code in static-stub-dog-epsilon-final npm...
EUVD-2025-178902
Malicious code in final-scale-static-yaml-debug npm...
MAL-2025-188122 Malicious code in moon-small-nu-rain-static (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fcf2a1dc5076c624ca43163bb493e90fd98998b7c3805d3aa5c9f1f5817c3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-60694
A stack-based buffer overflow exists in the validatestaticroute function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The function improperly concatenates user-supplied CGI parameters routeipaddr03, routenetmask03, routegateway03 into fixed-size buffers v6,...
CVE-2025-60694
A stack-based buffer overflow exists in the validate_static_route function of the httpd binary on Linksys E1200 v2 routers (specifically firmware E1200_v2.0.11.001_us.tar.gz ). The vulnerability is caused by the improper concatenation of user-supplied CGI parameters—specifically route_ipaddr_0~3,...
EUVD-2025-117064
Malicious code in static-red-wasp npm...
MAL-2025-139038 Malicious code in static-red-wasp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a62f8b52870a99829604b5d8e9dec5ec65b122e1e9689702a7625a69dc329e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Taught by the Flawed: How Dataset Insecurity Breeds Vulnerable AI Code
AI programming assistants have demonstrated a tendency to generate code containing basic security vulnerabilities. While developers are ultimately responsible for validating and reviewing such outputs, improving the inherent quality of these generated code snippets remains essential. A key...
EUVD-2025-102081
Malicious code in staticbuzzardz3n npm...