EUVD-2025-114397

Malicious code in dotenv-parse-variables-castor-impulse-webdriver-manager npm...

EUVD-2025-114375

Malicious code in dotenv-parse-variables-proxima-mongodb-got npm...

EUVD-2025-114384

Malicious code in dotenv-parse-variables-meteor-gridsome-eleventy npm...

EUVD-2025-114371

Malicious code in dotenv-parse-variables-yakutsk-farout-slides npm...

EUVD-2025-114388

Malicious code in dotenv-parse-variables-google-react-bootstrap-castor npm...

EUVD-2025-114383

Malicious code in dotenv-parse-variables-module-oauth-magellan npm...

EUVD-2025-114374

Malicious code in dotenv-parse-variables-readable-dactyl-dorado npm...

EUVD-2025-114380

Malicious code in dotenv-parse-variables-ora-aquarius-markdown npm...

EUVD-2025-114692

Malicious code in cz-conventional-changelog-dotenv-parse-variables-optimize-css-assets-webpack-plugin-elektra npm...

Malicious code in eclipse-nightmare-framework-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d0c499421d82973f4df93cf56abf3d08dc50da7eed95c154c8b6566c2cc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121967

Malicious code in sirius-jsonp-dotenv-parse-variables-perseus npm...

EUVD-2025-114372

Malicious code in dotenv-parse-variables-vuetify-winston-sass-loader npm...

EUVD-2025-115253

Malicious code in colors-neptune-dotenv-parse-variables-impulse npm...

MAL-2025-141715 Malicious code in dotenv-parse-variables-dactyl-hermes-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553918f29ad698a225d2b077fc60b1d34a4522e23490977aae6619892944fad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139393 Malicious code in antares-cache-andromeda-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a69f1e0e67e5d014f4810d287a413d9c3f360df647b2978a8a65cd71af5f0a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990801)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990801 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: tcpmakesynack can be called from process context tcprtxsynack now could be called in process...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from uninitialized variable reads and could lead to a kernel bug...

CVE-2025-40763

A vulnerability has been identified in Altair Grid Engine All versions V2026.0.0. Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary...

CVE-2025-40763

CVE-2025-40763 affects Altair Grid Engine (all versions

EUVD-2025-106751

A vulnerability has been identified in Altair Grid Engine All versions V2026.0.0. Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary...