28561 matches found
MAL-2025-187354 Malicious code in hexo-phenomic-odin-element-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24f316c2017efbe3858a178ba430fa5b15695ba388d42bc7350613d60c043be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175425
Malicious code in zenobia-grus-readable-semantic-ui npm...
EUVD-2025-177330
Malicious code in parallax-chakra-ui-cybernetics-unuk npm...
EUVD-2025-179796
Malicious code in chakra-ui-ethology-biomimicry-superflare npm...
EUVD-2025-176801
Malicious code in radiometric-vega-element-ui-oortcloud npm...
EUVD-2025-180524
Malicious code in ablation-semantic-ui-readable-xerxes npm...
EUVD-2025-179909
Malicious code in callback-dynamo-lacerta-chakra-ui npm...
MAL-2025-185984 Malicious code in callback-zephyr-semantic-ui-carpo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3ae303ee981c1075c7fce2279b092cf996dc5af84dcd3a3fbe2c0c2f2810e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in parallax-chakra-ui-mantle-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5160f72010bf6f5762daca3a099c3a80bdc7ccb9da4832813a1a861b6daa7085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179898
Malicious code in callback-zephyr-semantic-ui-carpo npm...
Linux Distros Unpatched Vulnerability : CVE-2025-12906
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page...
PT-2025-46789
Name of the Vulnerable Software and Affected Versions Nero BackItUp versions 2019 through 2025 Description Nero BackItUp contains a path parsing and user interface rendering flaw. This flaw, combined with how Windows handles file execution, can allow an attacker to run arbitrary code when a user...
Malicious code in oloc-uyg-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83657f24b6cb0405a7d555c8808dff22deb015349084f29cd35d418d6993a13a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-184728 Malicious code in oloc-uyg-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83657f24b6cb0405a7d555c8808dff22deb015349084f29cd35d418d6993a13a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in saku-aiaku-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5bac5d100e6824561d16871c75ec8d74fe8eb8685ef9166db0b3eab68737c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-12911
Inappropriate implementation in Permissions in Google Chrome allowed a remote attacker to perform UI spoofing via a crafted HTML page...
CVE-2025-12906
Inappropriate implementation in Permissions in Google Chrome allowed a remote attacker to perform UI spoofing via a crafted HTML page...
EUVD-2025-120388
Malicious code in wolf-comet-dotenv-safe-element-ui npm...