MAL-2025-185664 Malicious code in auth0-corvus-webdriver-mocha-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef76d6190a2d4ac766e75d768dcc45e8844f66bb674a9012568421bca74a6ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187948 Malicious code in materialize-stop-quasar-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40c02f2b49861ae44e49dc7dbfbcee45f3efecf0ac13cc6817c5a72d030129eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187303 Malicious code in heka-buffer-install-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d173a46b2222709ebde51168c15d95d657b1e4e9bdebe6edb1073438c8838fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187685 Malicious code in key-refactor-finally-optimize-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d884c51afdb274f51556f45b4b1a3cd67fc75bce3d5f03fea59a2f25352a3e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187272 Malicious code in halley-unuk-hyperion-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c9506d8e26da1a023822ac60bbd1d414afd9ff2d27728755bfac524a22a8579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186542 Malicious code in dendrochronology-test-markdownlint-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367aecf6bc954214e27f286e5d8f5261d0c857e8add3e2abe083efdcd37cacd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189810 Malicious code in tardigrade-leda-jest-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc10d3011c67ac3227ac1cca651f3336c62b6433d148e3e9eb1973f82c03c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186171 Malicious code in cloud-analyze-spy-thread-object (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f83668a539b397cbb90f7ba290532b55a4fb54c934b34aaade5877b673db5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-23361

NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and da...

CVE-2025-33178

NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data...

CVE-2025-33186

NVIDIA AIStore contains a vulnerability in AuthN. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering...

PT-2025-46829

A weakness has been identified in macrozheng mall-swarm up to 1.0.3. Affected is the function cancelUserOrder of the file /order/cancelUserOrder. Executing manipulation of the argument orderId can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been...

ROS-20251113-06

The BIND DNS server vulnerability is related to a pseudo-random number generator PRNG vulnerability. Exploitation exploitation of the vulnerability could allow a remote attacker to compromise the integrity of data in the DNS system A vulnerability in the BIND DNS server is related to the loading ...

Dell Alienware Command Center 访问控制错误漏洞

DELL Alienware Command Center is Dell's proprietary control software for Alienware-branded computers, which is used to customize hardware features, optimize performance and manage game settings. An improper access control vulnerability exists in DELL Alienware Command Center, which can be exploit...

PT-2025-46895

Dell Alienware Command Center 6.x AWCC, versions prior to 6.10.15.0, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering...

Malicious code in lobaic-gib-gufagouadfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28930acf59e82384ee4052a1a814454518a2f4123daa711e7f2df34fe67097f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bobacn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc823f56c7e6bb094742a3a37fa62e0a00e44523c3db483628e97eb7a22187f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-giso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9b2f4e74c5236a314eef0d170151546a9601a797d8ad6a82493575961334fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olios-nol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb6e02602305b959db484744888e172ec95a514459c34dafae019f7b429f5366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmlfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a58013ae5ded9659c79946f06cd25493ae2eb469ffe8b3ccd2d9cf26bd438c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...