EUVD-2025-88671

Malicious code in staticlampreyz3n npm...

Malicious code in static_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18b4d264beba87e06682be89e60c48071b2b39454e0092ea63303cfd7146c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78228

Malicious code in staticorcaz3n npm...

MAL-2025-109086 Malicious code in static_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6185b105e09c1ac912ff98b39c66991e53a18cc35b2b3914fbd3d7f9faade5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73534

Malicious code in staticwallabyz3n npm...

EUVD-2025-73536

Malicious code in staticrodentz3n npm...

EUVD-2025-73540

Malicious code in staticbobcatz3n npm...

EUVD-2025-73538

Malicious code in staticlandfowlz3n npm...

EUVD-2025-66512

Malicious code in staticanacondaz3n npm...

EUVD-2025-66511

Malicious code in staticbaboonz3n npm...

MAL-2025-90743 Malicious code in static_baboon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7b66f882ca8ede2961b0fdf7e8e338626eb643810a01a397d8966e08701fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51822

Malicious code in static-scarlet-whitefish npm...

MAL-2025-70827 Malicious code in static-scarlet-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab08208f1907de867a4918ca21dc4ece89c3d7620a0d767833dce303e8b590f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

QLCoder: A Query Synthesizer for Static Analysis of Security Vulnerabilities

Static analysis tools provide a powerful means to detect security vulnerabilities by specifying queries that encode vulnerable code patterns. However, writing such queries is challenging and requires diverse expertise in security and program analysis. To address this challenge, we present QLCoder...

EUVD-2025-49316

Malicious code in statickitez3n npm...

[SECURITY] Fedora 43 Update: uv-0.9.7-2.fc43

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

HYDRA: A Hybrid Heuristic-Guided Deep Representation Architecture for Predicting Latent Zero-Day Vulnerabilities in Patched Functions

Software security testing, particularly when enhanced with deep learning models, has become a powerful approach for improving software quality, enabling faster detection of known flaws in source code. However, many approaches miss post-fix latent vulnerabilities that remain even after patches...

[SECURITY] Fedora 42 Update: python-starlette-0.47.3-2.fc42

Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: =E2=80=A2 A lightweight, low-complexity HTTP web framework. =E2=80=A2 WebSocket support. =E2=80=A2 In-process background tasks. =E2=80=...

Explaining Software Vulnerabilities with Large Language Models

The prevalence of security vulnerabilities has prompted companies to adopt static application security testing SAST tools for vulnerability detection. Nevertheless, these tools frequently exhibit usability limitations, as their generic warning messages do not sufficiently communicate important...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990542)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990542 advisory. In the Linux kernel, the following vulnerability has been resolved: vmci: prevent speculation leaks by sanitizing event in eventdeliver Coverity spotted that eventms...