20525 matches found
MAL-2025-189810 Malicious code in tardigrade-leda-jest-chakra-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc10d3011c67ac3227ac1cca651f3336c62b6433d148e3e9eb1973f82c03c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
PT-2025-46789
Name of the Vulnerable Software and Affected Versions Nero BackItUp versions 2019 through 2025 Description Nero BackItUp contains a path parsing and user interface rendering flaw. This flaw, combined with how Windows handles file execution, can allow an attacker to run arbitrary code when a user...
Linux Distros Unpatched Vulnerability : CVE-2025-12906
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page...
Malicious code in oloc-uyg-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83657f24b6cb0405a7d555c8808dff22deb015349084f29cd35d418d6993a13a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-184728 Malicious code in oloc-uyg-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83657f24b6cb0405a7d555c8808dff22deb015349084f29cd35d418d6993a13a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in saku-aiaku-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5bac5d100e6824561d16871c75ec8d74fe8eb8685ef9166db0b3eab68737c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-12911
Inappropriate implementation in Permissions in Google Chrome allowed a remote attacker to perform UI spoofing via a crafted HTML page...
CVE-2025-12906
Inappropriate implementation in Permissions in Google Chrome allowed a remote attacker to perform UI spoofing via a crafted HTML page...
EUVD-2025-111100
Malicious code in mira-pino-pretty-chakra-ui-virgo npm...
EUVD-2025-124792
Malicious code in mongodb-element-ui-apollo-hermes npm...
EUVD-2025-120388
Malicious code in wolf-comet-dotenv-safe-element-ui npm...
EUVD-2025-121946
Malicious code in sirius-standard-mensa-element-ui npm...
EUVD-2025-114133
Malicious code in element-ui-pino-pretty-miranda-adonis npm...
EUVD-2025-114138
Malicious code in element-ui-lint-staged-apollo-cordelia npm...
EUVD-2025-114144
Malicious code in element-ui-eslint-config-public-miranda npm...
EUVD-2025-121398
Malicious code in terser-meteor-element-ui-callisto npm...
EUVD-2025-121116
Malicious code in triton-cosmos-await-element-ui npm...
EUVD-2025-123333
Malicious code in procyon-element-ui-leda-arcturus npm...
Malicious code in chakra-ui-lint-webpack-yildun (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973414239625d55c246014e0aaffaf65e3adac322e0a939b9e018aebdb055f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...