EUVD-2025-80143

Malicious code in variablealligator0xrequest npm...

EUVD-2025-65594

Malicious code in variableporpoisez3n npm...

MAL-2025-86096 Malicious code in great_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975251481db80a9c72c860e7202fed5576f556e2ad750dc551fd74285a7812e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf10dd9c18bcb2d6983fa05b87b77092ba6aa0d3921e11046323cec922c039b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82019 Malicious code in variable_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765df721f21736f8e96171505f172d6ad289ae1b51fef12191c963dd334187e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51245

Malicious code in variable-chocolate-puma npm...

Malicious code in variable-chocolate-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7b0fd9e3f50e752b35cfce7a47ce377dc128160dffb348b2c38d46abee17c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71404 Malicious code in variable-chocolate-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc5c87e44fa0ef20264749544b88c160bf3b4693fbf25a951b992f44755fce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51248

Malicious code in variable-aquamarine-ptarmigan npm...

EUVD-2025-51247

Malicious code in variable-blush-trout npm...

EUVD-2025-51244

Malicious code in variable-rose-gopher npm...

EUVD-2025-51246

Malicious code in variable-chocolate-cat npm...

EUVD-2025-56770

Malicious code in variableaphidz3n npm...

Use of Uninitialized Variable

Overview OpenEXR is a Python bindings for the OpenEXR image file format Affected versions of this package are vulnerable to Use of Uninitialized Variable via the genericunpack function. An attacker can trigger undefined behavior or cause a crash by providing specially crafted input that leads to...

Use of Uninitialized Variable

Overview Affected versions of this package are vulnerable to Use of Uninitialized Variable via the genericunpack function. An attacker can trigger undefined behavior or cause a crash by providing specially crafted input that leads to the use of uninitialized memory. PoC The archive includes the...

EUVD-2025-49104

Malicious code in variablesolez3n npm...

EUVD-2025-49105

Malicious code in variablemarmosetz3n npm...

MAL-2025-61565 Malicious code in variable_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c39216d17ad7d74306c38c5ba948382b0ce6468628f04e413a699521a0dfa16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-6075

A vulnerability in Python’s os.path.expandvars function that can cause performance degradation. When processing specially crafted, user-controlled input with nested environment variable patterns, the function exhibits quadratic time complexity, potentially leading to excessive CPU usage and denia...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988693)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988693 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/vrr: Set VRR capable prop only if it is attached to connector VRR capable property is not...