2046 matches found
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990875)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990875 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check numvalidsets before accessing readerwmsets WHY & HOW numvalidsets needs to...
EUVD-2025-101060
Malicious code in validflamingoz3n npm...
EUVD-2025-88125
Malicious code in validcanidaez3n npm...
EUVD-2025-88124
Malicious code in validgazellez3n npm...
EUVD-2025-75301
Malicious code in validearwig-appteadev npm...
EUVD-2025-77997
Malicious code in validbarnaclez3n npm...
EUVD-2025-77996
Malicious code in validcatfishz3n npm...
MAL-2025-110319 Malicious code in valid_barnacle_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d4f6378d1dfa46b140466976c95edf1c3f391d4112d33f765706c337e0cb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-83750
Malicious code in validmarmotz3n npm...
EUVD-2025-71303
Malicious code in validhedgehogz3n npm...
Malicious code in valid_dolphin_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6332d566e9029a7f9020466893a5e21faaca6af3dee5f22cb8d8bf914848192e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51255
Malicious code in valid-turquoise-emu npm...
Malicious code in valid-salmon-leech (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56acc6830d2b06cc8ab4af0b5eb9c813d71b32658c54285d1cf808658749b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51256
Malicious code in valid-salmon-leech npm...
EUVD-2025-49107
Malicious code in validmarmosetz3n npm...
Malicious code in valid_marmoset_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e5f081f955afbfc8de5f7523bdd2c328def4f198b4e46426ee2f5f63d0dd6b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-44760
Malicious code in validroosterz3n npm...
EUVD-2025-44759
Malicious code in validsilkwormz3n npm...
CVE-2025-64178 Jellysweep uses uncontrolled data in image cache API endpoint
Jellysweep is a cleanup tool for the Jellyfin media server. In versions 0.12.1 and below, /api/images/cache, used to download media posters from the server, accepted a URL parameter that was directly passed to the cache package, which downloaded the poster from this URL. This URL parameter can be...