Malicious code in uncertain_spoonbill_azure-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2dea16fbd7b8a523ffc2d402e83c418270265f4f1af2b1a2fade5ce2ea5c74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77488

Malicious code in uncertainspoonbillazure-19 npm...

EUVD-2025-78049

Malicious code in uncertainmammalz3n npm...

Malicious code in uncertain_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd792007a290f8b5234380fec4b5c2facb2a7f5c3de689bffe32b4550f4ba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110038 Malicious code in uncertain_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa4c8c1c75fbb6d78b6ff36ebe3d330ae03debc4978f8639cfb7c99a5d3c9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80222

Malicious code in uncertainclamdumbs npm...

MAL-2025-76660 Malicious code in transform-es2015-block-scoping (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e96489b1847106951744b2eb46d3c771d38406ff77d148fa97dd349910a934c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-76658 Malicious code in no-barrel-files (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d26ffac772339a03c38a909739d6648394caa3bf5f5d6052d35cb5c0ef21ac33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-51411

Malicious code in uncertain-turquoise-cockroach npm...

EUVD-2025-51415

Malicious code in uncertain-aqua-bat npm...

MAL-2025-71236 Malicious code in uncertain-ivory-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3a35ca34ab638b5e395973e27cb4d739fd7df296e89afa7a2028b730e19294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51414

Malicious code in uncertain-black-mollusk npm...

EUVD-2025-51412

Malicious code in uncertain-sapphire-swordfish npm...

EUVD-2025-51413

Malicious code in uncertain-ivory-tiger npm...

Malicious code in uncertain-ivory-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3a35ca34ab638b5e395973e27cb4d739fd7df296e89afa7a2028b730e19294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56844

Malicious code in uncertainhamsterz3n npm...

EUVD-2025-56845

Malicious code in uncertainbadgerz3n npm...

Malicious code in graphhub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f3f531a91594ad386dc82c959af2f53b1e335972b4a7a451fe0184252616c3 The package graphhub was found to contain malicious code. Source: ghsa-malware 4b0d6ee11320721cc3e65d9887c3b251b574bc7e67419fe63dedaa18b15dad9b Any...

MAL-2025-49092 Malicious code in typescriptjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6082397917a827f5633f57e4e1ab18b29257f511ac05859c4c27d6b632fae026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2025-12207

A vulnerability has been found in Kamailio 5.5. This affects the function yyerrorat of the file src/core/cfg.y of the component Grammar Rule Handler. Such manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed to the public and may...