1194 matches found
Malicious code in connietalbots (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf715c73ae85409bb8ce11e3d5c7f3707df30f8215e3d76f09afb5771e318706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in scary-apricot-aardvark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cd334369bf2715f3c0b7fbcf7cdbbbc4cdf710e787729355e11dcba48c5a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rainy-gold-finch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba2e47d83deb028c2eb11eb6f0d0b7b0ca70077c3ea41ef8796af08c1857be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-64270 Malicious code in maya-kepok61-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183e2b8df5a6852bea85bd761236ea502dc35970b9957b182a5093d9bccfefef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-54616 Malicious code in rifqi-ketan12-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa76c6ff6592e5752efb41186f3145e8f65313fb07381e4f27fad85471d08dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-53725 Malicious code in irma-lapis55-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43dbe56911e418bb64830cf842db3931ca6f6ab03d393afe807510229e9f0693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-54781 Malicious code in sari-asinan99-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870e344341628fa582c142f4e38ad950e286519699374696ac5da6fd5eddfd7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in joni-menjes87-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4af6d18683b530fcf8e1d81b885b8c3e8a5d5a3f423c86042c11c3421ec519ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-53278 Malicious code in lutfi-nasipecel24-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31200a05653ce5f0600120b83361ddd8744dc735cd8b7614ae7de0ce32380a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-37923
GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle MitM attack to intercept update requests and replace installer or update packages with malicious files...
Debian: Security Advisory (DLA-4360-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-8e17ba12e5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Medium: cuda-cuxxfilt-12-9
Issue Overview: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service. CVE-2025-23272 Affected Packages:...
Medium: cuda-toolkit-12
Issue Overview: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service. CVE-2025-23272 Affected Packages:...
Fedora: Security Advisory (FEDORA-2025-e16b533459)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-39dd3e6f91)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EUVD-2019-13361
Malware in sbrugna...
EUVD-2020-21291
Malware in sbrugna...