CVE-2026-2258

Affected software: aardappel lobster up to 2025.4. Vulnerable component: WaveFunctionCollapse function in library dev/src/lobster/wfc.h. Issue causes memory corruption via local manipulation. Exploit has been published and may be used. A patch is available (commit c2047a33e1ac2c42ab7e8704b33f7ea5...

Malicious code in zephyr-mongodb-wavefunction-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6455e842bfed2e45795b6fa4955bfa999151b2b9d2cf8678f31179f7a042f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175586

Malicious code in webpack-less-heliophysics-wavefunction npm...

EUVD-2025-175627

Malicious code in wavefunction-parallax-jovian-jasmine npm...

EUVD-2025-177484

Malicious code in odin-holography-wavefunction-webpack npm...

EUVD-2025-178502

Malicious code in html-webpack-plugin-wavefunction-local-ora npm...

EUVD-2025-178493

Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax npm...

Malicious code in wavefunction-prompts-webdriver-mocha-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9133d1deb74b2792ed8706555c49fa13ce1ca719f838438eaefd5622916c5386 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175916

Malicious code in tool-wavefunction-ultra-gridsome npm...

EUVD-2025-175629

Malicious code in wavefunction-crust-interstellarmedium-bootstrap npm...

EUVD-2025-175628

Malicious code in wavefunction-optimize-css-assets-webpack-plugin-development-ursa npm...

EUVD-2025-177688

Malicious code in nconf-wavefunction-titan-europa npm...

EUVD-2025-177592

Malicious code in nightwatch-nashira-wavefunction-perturbation npm...

EUVD-2025-176939

Malicious code in public-eclipse-wavefunction-entanglement npm...

EUVD-2025-175630

Malicious code in wavefunction-ariel-pavo-equinox npm...

EUVD-2025-175625

Malicious code in wavefunction-procyon-archaeoastronomy-uranology npm...

EUVD-2025-175624

Malicious code in wavefunction-prompts-webdriver-mocha-vuetify npm...

EUVD-2025-178478

Malicious code in hydra-regulus-wavefunction-spectron npm...

EUVD-2025-176862

Malicious code in quantumfoam-wavefunction-lacerta-singularity npm...

EUVD-2025-177794

Malicious code in mocha-eventhoriz-wavefunction-redshift npm...