CVE-2025-64518

An XML External Entity XXE injection vulnerability was found in the CycloneDX Java core library’s XML validation step where the XML Validator was not configured securely. When a specially crafted CycloneDX BOM XML is validated, external XML entities can be processed XXE, allowing an attacker to...

Linux kernel 安全漏洞

Linux kernel is a product of the Linux Foundation of the United States, etc. Linux kernel is the kernel used by the open-source operating system Linux. aaron update, etc. is a product of the Aaron Individual Developer. update is a library. clickHouse ch, etc. is an open-source product of...

EUVD-2025-80963

Malicious code in paulette-validator-catalyst npm...

EUVD-2025-80265

Malicious code in townsend-validator-catalyst npm...

Malicious code in paulette-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320422b9549916ed1a903b1fdde13ba719183fa62f322a87db91b7bc7b2cd0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81276

Malicious code in mathews-validator-catalyst npm...

Malicious code in lois-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443a28a34078f1801c9ce7e2fffe41d25f37a5bf9c21f96b251a31b225f99db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81700

Malicious code in hicks-validator-catalyst npm...

Malicious code in kory-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7c3c03e2021a2370261f9859262150cb03e21588d7586234d0851db89eca895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mathews-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9da9daaf79f9bbe493a2780c5b5c741676e488140d40a403828b9064e6847c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eugene-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 535e75b7366b5df20db6b738d9e76bf0460d42914259468fb8d28c449da59d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81428

Malicious code in kory-validator-catalyst npm...

EUVD-2025-79727

Malicious code in bernadine-validator-catalyst npm...

EUVD-2025-82613

Malicious code in boyle-validator-catalyst npm...

Malicious code in townsend-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c68446eccefea4b27787706d33e3b48f8c7242e8307a6c7757b4d9c96b9ae79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lonny-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1666a1dc9802d39cfb57705827af09f01d85f825ce6b3a71c212c75eccb8556c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105967 Malicious code in mooney-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f30af66d18545ef8be075b3600519826353e00aacf02270aea5dc21cbc13e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109062 Malicious code in stacey-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0898173c7756e700fc17bcad1fbe5f08c56712ad76ed3c79bcc449553f7253c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104896 Malicious code in kristine-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cec16c0a04891efad74b1c7fd4598c3024f112300985ac467642b7e15c869e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106996 Malicious code in paulette-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320422b9549916ed1a903b1fdde13ba719183fa62f322a87db91b7bc7b2cd0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...