EUVD-2026-15068

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, macOS Sonoma 14.8.5, macOS Tahoe 26.3, macOS Tahoe 26.4. An app may be able to access user-sensitive data...

Exploit for CVE-2026-23829

SimoesCTT-mailpit-phase-reconstructor It's a CRLF injection in...

EUVD-2025-178373

Malicious code in interface-iota-tau-optimize-bundle npm...

EUVD-2025-180318

Malicious code in array-simple-water-tau-book npm...

EUVD-2025-179385

Malicious code in debug-tau-wind-gamma-sun npm...

EUVD-2025-176055

Malicious code in tau-mu-good-beta-kappa npm...

EUVD-2025-176053

Malicious code in tau-upsilon-function-alpha-kernel npm...

EUVD-2025-175779

Malicious code in upsilon-sed-authenticate-await-tau npm...

EUVD-2025-178689

Malicious code in good-serialize-protected-tau-fast npm...

Malicious code in tau-data-grid-minify-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fd667a40b0b62ada505565aab53c39d96f06b26be3e9b5ce274831637ecbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176060

Malicious code in tau-float-string-reject-byte npm...

EUVD-2025-180076

Malicious code in big-tau-stack-root-compress npm...

EUVD-2025-178936

Malicious code in fast-stack-tau-execute-hash npm...

EUVD-2025-178790

Malicious code in gamma-integer-hash-double-tau npm...

EUVD-2025-179619

Malicious code in compress-tau-enum-book-serialize npm...

EUVD-2025-176058

Malicious code in tau-import-file-bad-byte npm...

EUVD-2025-176054

Malicious code in tau-psi-theta-process-optimize npm...

EUVD-2025-179319

Malicious code in deserialize-double-simulate-interpret-tau npm...

EUVD-2025-176059

Malicious code in tau-fork-hot-web-big npm...

Malicious code in tau-fork-hot-web-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1535674fe21c755cbdb872d3615e3794dce7ac1ab4df9d0b4982a0903171a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...