4541 matches found
Malicious Package
Overview tensor-fi-utils-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-192375 Malicious code in tensor-fi-utils-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 097848a520bc6a7316c011e97b306f4743b5498acdeccea54d5d4a0ab44bdebd The package tensor-fi-utils-core was found to contain malicious code. Source: ghsa-malware...
Malicious code in tensor-fi-utils-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 097848a520bc6a7316c011e97b306f4743b5498acdeccea54d5d4a0ab44bdebd The package tensor-fi-utils-core was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-201660
Malicious code in tensor-fi-utils-core npm...
0lever-utils (>=0.0.2 <=0.0.7), 0xdegenmo-lighter-mcp (=0.1.1) +16246 more potentially affected by CVE-2025-66471 via urllib3 (>=1.10.2 <=2.5.0)
urllib3 PYPI version =1.10.2, =0.0.2, =0.3.0, =0.0.1a0, =1.1.2, =0.1.0, =0.1.0, =0.0.2, =0.0.5, =0.0.7 - a-mailx =0.1.0 - a-texam =1.1.0 - a16z =0.0.1 and more Source cves: CVE-2025-66471 Source advisory: OSV:GHSA-2XPW-W6GG-JR37...
@4399ywkf/router (>=0.0.1 <=0.0.4), @aws/nx-plugin (>=0.44.0 <=0.59.0) +89 more potentially affected by CVE-2025-55182 via @modern-js/utils (>=2.65.2 <=2.69.2)
@modern-js/utils NPM version =2.65.2, =0.0.1, =0.44.0, =2.23.0, =0.3.53, =1.0.1, =0.1.0-next.717, =2.65.2, =2.65.2, =2.65.2, =2.65.2, =2.65.2, =3.7.20, =3.7.60 and more Source cves: CVE-2025-55182 Source advisory: SNYK:JS-MODERNJSUTILS-14723360...
@bgord/bun (>=1.0.2 <=1.2.4), @devix-tecnologia/utils-ts (=1.0.0) +37 more potentially affected by CVE-2025-14874 via nodemailer (=7.0.10)
nodemailer NPM version =7.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on nodemailer and may be impacted: - @bgord/bun =1.0.2, =32.0.0, =4.0.1, =4.9.5, =8.0.1, =8.0.2, =11.3.0, =5.8.38, =1.9.0, =2.1.6, =1.8.0, =0.3.2, =2.17.15 and more Source cves...
Malicious code in tensor-fi-crypto-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ed8cc30500616c36f3301bfeb5ec377ea53456fdfcbcb8fa1993346cb64958 The package tensor-fi-crypto-utils was found to contain malicious code...
MAL-2025-191597 Malicious code in tensor-fi-crypto-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ed8cc30500616c36f3301bfeb5ec377ea53456fdfcbcb8fa1993346cb64958 The package tensor-fi-crypto-utils was found to contain malicious code...
Important Photon OS Security Update - PHSA-2025-5.0-0691
Updates of 'cifs-utils', 'linux-esx', 'linux' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2025-5.0-91-0691
Updates of 'linux', 'linux-esx', 'cifs-utils' packages of Photon OS have been released...
CVE-2025-64483
Wazuh is a security detection, visibility, and compliance open source project. From version 4.9.0 to before 4.13.0, the Wazuh API – Agent Configuration in certain configurations allows authenticated users with read-only API roles to retrieve agent enrollment credentials through the...
EUVD-2025-199381
Malicious code in @voiceflow/utils-designer npm...
EUVD-2025-199428
Malicious code in @voiceflow/backend-utils npm...
MAL-2025-191334 Malicious code in @voiceflow/backend-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939c031191eb7578a914d631512a9cf7594b3fa8719c9d5a82dc8469a70a5a72 The package @voiceflow/backend-utils was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191282 Malicious code in @oku-ui/utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e363f9563598ec9e11de3c2f70d1e8f832d7cf86e80fa1ee85b454d7745c662 The package @oku-ui/utils was found to contain malicious code. Source: google-open-source-security...
MAL-2025-191127 Malicious code in m25-transaction-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e91218f5eaff53a78f8a4c20f4090ee4c99958d5784c54a3ee2280d00658643 The package m25-transaction-utils was found to contain malicious code. Source: ghsa-malware...
Malicious code in m25-transaction-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e91218f5eaff53a78f8a4c20f4090ee4c99958d5784c54a3ee2280d00658643 The package m25-transaction-utils was found to contain malicious code. Source: ghsa-malware...