EUVD-2025-83994

Malicious code in tinyparakeetz3n npm...

EUVD-2025-73271

Malicious code in tinyblackbirdz3n npm...

MAL-2025-91118 Malicious code in tiny_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed0ca13ca282d5bec16808536bdbe914d93dd2918bb45747155caaee2fed7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-66136

Malicious code in tinyguineafowlz3n npm...

MAL-2025-81683 Malicious code in tiny_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661434c5010c4318d5896469ccb6796598522b2611c3f6c282397d1beaaf015a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557bbe3584b000837b00088f0ce9571c9a3476bac6aaa4b45d27dedc0937478b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71146 Malicious code in tiny-tan-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f843901419c246b41964318f8192499b71fe4b80d89f5dd2f4fd00eea35c402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51507

Malicious code in tiny-amaranth-pigeon npm...

EUVD-2025-51503

Malicious code in tiny-tan-falcon npm...

Malicious code in tiny-tan-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f843901419c246b41964318f8192499b71fe4b80d89f5dd2f4fd00eea35c402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51506

Malicious code in tiny-aquamarine-hornet npm...

Malicious code in tiny-red-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b027fd39b632cb7864ad150e7b65562e7fdcb3dfd5877181cef17890a90c367e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51504

Malicious code in tiny-sapphire-canid npm...

EUVD-2025-51505

Malicious code in tiny-red-chimpanzee npm...

EUVD-2025-57025

Malicious code in tinycockroachz3n npm...

CVE-2025-58186

Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption...

CVE-2025-11502

The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'saswptinymultiplefaq' shortcode in all versions up to, and including, 1.51 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...

PT-2025-44708

Name of the Vulnerable Software and Affected Versions Schema & Structured Data for WP & AMP plugin for WordPress versions through 1.51 Description The Schema & Structured Data for WP & AMP plugin for WordPress has a Stored Cross-Site Scripting issue related to the 'saswp tiny multiple faq'...

AZL-69140 CVE-2025-58186 affecting package msft-golang 1.24.13-1

Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption...

Division by zero

Overview Affected versions of this package are vulnerable to Division by zero via the CLAHEImage function in MagickCore/enhance.c. An attacker can cause the process to crash or exhaust system resources by supplying crafted parameters or very small images that result in zero tile dimensions, leadi...