EUVD-2025-54054

Malicious code in grim-tomato-moose npm...

Malicious code in possible-tomato-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7894f4f3576eefc718fb1229726634dbe3095c6d79a9c469863d50c784dcb120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52317

Malicious code in representative-tomato-boar npm...

EUVD-2025-51190

Malicious code in violent-tomato-nightingale npm...

EUVD-2025-53752

Malicious code in initial-tomato-cardinal npm...

EUVD-2025-54557

Malicious code in ethical-tomato-bison npm...

Malicious code in different-tomato-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c37abd6bb661408be04fdaebd76327624cc02fb77124a928bd5d2e10a81d5dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51014

Malicious code in worried-tomato-firefly npm...

MAL-2025-67043 Malicious code in brainy-tomato-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447519bb24a15ea0fefd750380d1c0950f555489134aa2e73ebae574bad4b381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68190 Malicious code in extended-tomato-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8c07b0523004b8641ef70ddd846e2f9c69a058b95d4a24ab8fb38d0ca630dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71665 Malicious code in xenacious-tomato-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf797140d786549263937d29a5791c8078010dc1389c3d0feb019e9764c87d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70513 Malicious code in selected-tomato-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c818ef8c96f71b5bd5f5e247edb25ca30cbff584daa0107d3a581eb908e924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2020-0607

Malware in sbrugna...

UBUNTU-CVE-2024-35921

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix oops when HEVC init fails The stateless HEVC decoder saves the instance pointer in the context regardless if the initialization worked or not. This caused a use after free, when the pointer is freed i...

CVE-2024-35921

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix oops when HEVC init fails The stateless HEVC decoder saves the instance pointer in the context regardless if the initialization worked or not. This caused a use after free, when the pointer is freed i...

CVE-2024-35921 media: mediatek: vcodec: Fix oops when HEVC init fails

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix oops when HEVC init fails The stateless HEVC decoder saves the instance pointer in the context regardless if the initialization worked or not. This caused a use after free, when the pointer is freed i...

CVE-2024-35921 media: mediatek: vcodec: Fix oops when HEVC init fails

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix oops when HEVC init fails The stateless HEVC decoder saves the instance pointer in the context regardless if the initialization worked or not. This caused a use after free, when the pointer is freed i...

CVE-2024-35921

CVE-2024-35921 affects the Linux kernel media/mediatek vcodec HEVC decoding path. The stateless HEVC decoder stored the instance pointer in the context even on initialization failure, leading to a use-after-free when the pointer was freed during deinit. The documented workaround is to store the i...

SUSE CVE-2011-2636

Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service application crash via unknown content on a web page, as demonstrated by a certain Tomato Firmware page...

CVE-2022-38451

A directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability...