201 matches found
EUVD-2025-52074
Malicious code in shared-pink-viper npm...
EUVD-2025-51008
Malicious code in worthwhile-blush-viper npm...
MAL-2025-70575 Malicious code in shared-pink-viper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e48f6157c9d061d2ec5377db86e49b8ed4a2f2b18c93f02b65786a2664220810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in alright-scarlet-viper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a415ad6a98df925e5a537a7d35a79fa195b9bf4ce1390c84af5235a656471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53041
Malicious code in neutral-copper-viper npm...
Malicious code in worthwhile-blush-viper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277fcbd96f556a0d28bd1bbb62327f6f4f462bb1686ab32ecab54e6df7538332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54722
Malicious code in easy-turquoise-viper npm...
EUVD-2025-59429
Malicious code in grievingviperz3n npm...
EUVD-2025-57422
Malicious code in ruralviperz3n npm...
EUVD-2025-59650
Malicious code in fewviperz3n npm...
EUVD-2025-59798
Malicious code in everydayviperz3n npm...
Malicious code in sunny_viper_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef465a768522b4d3ea0a44094e1f003d9520e1f094dfff97cfb453c4fb46a2d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-49322
Malicious code in stableviperz3n npm...
Malicious code in magnificent_viper_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd547e2be273a890b1bfb69fdae7095e80e3c7a3f393587784cfc17177db542a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bloody_viper_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6b9c61b8e5369c58f3885d81807f20533cd81c50410b1033d151683fbb93da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Medium: nerdctl
Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: nerdctl Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extra...
Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025-20362
Cisco on Wednesday disclosed that it became aware of a new attack variant that's designed to target devices running Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software releases that are susceptible to CVE-2025-20333 and...
Medium: amazon-cloudwatch-agent
Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Issue Correction: Run dnf update amazon-cloudwatch-agent --releasever 2023.9.20251014 or dnf update --advisory ALAS2023-2025-1224...