8412 matches found
EUVD-2025-179007
Malicious code in event-bootes-dotenv-parse-variables-ursa npm...
MAL-2025-186616 Malicious code in dotenv-parse-variables-biogeochemistry-version-betelgeuse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d3c97f89cf63e178ad70c22fd8f637758e020a930ce7a5f812b784f9baca16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176346
Malicious code in slides-install-dynamo-dotenv-parse-variables npm...
EUVD-2025-178832
Malicious code in framework-writable-dotenv-parse-variables-yonder npm...
EUVD-2025-180388
Malicious code in apollo-dotenv-parse-variables-stratigraphy-private npm...
EUVD-2025-179267
Malicious code in dotenv-parse-variables-astrobiology-readable-magellan npm...
EUVD-2025-178587
Malicious code in hawkingradiation-mensa-dotenv-parse-variables-inquirer npm...
EUVD-2025-178183
Malicious code in koa-eslint-plugin-corvus-dotenv-parse-variables npm...
MAL-2025-188761 Malicious code in polaris-build-event-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5870c41fb0c9b2494b76d327532e4ff9b679ae512b5700ee30c24b2d374aed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186618 Malicious code in dotenv-parse-variables-init-child-process-genomics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98640b4344bddcf7df3cfc9d3664fa0d315971b9d3d25520d63786b5a4be8e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186619 Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e2cf5e995e7be6217368c91ec8ecf853022838cc7a763cbcc73d49e0c23b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
PT-2025-46904
Name of the Vulnerable Software and Affected Versions Socket Firewall versions prior to 0.15.5 Description Socket Firewall is an HTTP/HTTPS proxy server designed to enforce security policies by blocking dangerous packages. Versions of Socket Firewall prior to 0.15.5 are susceptible to arbitrary...
CVE-2025-64407
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...
CVE-2025-64407 Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...
CVE-2025-64407 Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...
CVE-2025-64407
Technical details for CVE-2025-64407 are not publicly provided in the connected documents. Available sources discuss related vulnerabilities (CVE-2024-12425/12426) and Apache OpenOffice issues, but do not specify this CVE’s affected products, root cause, or fixes.
EUVD-2025-116709
Malicious code in antares-cache-andromeda-dotenv-parse-variables npm...
EUVD-2025-121616
Malicious code in stop-zenith-auriga-dotenv-parse-variables npm...