CVE-2022-44268

CVE-2022-44268 ImageMagick 7.1.0-49 vulnerable to Information Disclosure Usage exploit.sh sh exploit.sh Output image is stored in output.png getdata.sh sh getdata.sh Source https://www.metabaseq.com/threat/imagemagick-zero-days/...

Malicious code in likely_marmot_emerald-49 (npm)

Source: amazon-inspector 494f797f4d6c9f4a0b40d5ea1095649aad3395e929016b3c5a6da0192b822741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lia-49 (npm)

Source: amazon-inspector 72bdd4c17e350af42e23de565eba924f4928c4e24640dc4e6e329e8394314132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ita-49 (npm)

Source: amazon-inspector da085f6a5480f01af71ec0ac47897707ec86b2113bc26d8b62f16aca69ec8169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ira-49 (npm)

Source: amazon-inspector bce35e4c8247b14f6636f497e35d94b3bd45cc34ce6d4e84082a3eebf464f658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in intan-49 (npm)

Source: amazon-inspector 857332fb64e9a19247650ac75c60375dbfd7a46859d5d3e84dbdebb60e552349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ilop-49 (npm)

Source: amazon-inspector 5861a776ede16cd93ceb93618472c7a7e1ce5f35f98ca1142b931ec95debc4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ilang-49 (npm)

Source: amazon-inspector 22fddc0f9705fd39fb9e342fbc9bb728795062da69959209aef8ff92220b067a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in icha-49 (npm)

Source: amazon-inspector 1e21fb958b404af11b598adba2b6d551f764bdbfe8b697684a0906ab7459a30b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hokage-49 (npm)

Source: amazon-inspector a83cdc475141634e21d6c516121a482c79b575f33e99008dc7ca92bd6114bed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hafiz-49 (npm)

Source: amazon-inspector afa5ea317423810ecd487e49541cbca91dfbd10d17c5ecebcb5f5ab7d0cb4a0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in grand_cuckoo_amethyst-49 (npm)

Source: amazon-inspector 69e13abbaf072e6873706dd30b8532fc3ac21d4d16dad9fc9043221effd30714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-49 (npm)

Source: amazon-inspector 4f7639b8ce2202283171f738acff6fcaec9cc4f2fe172199127cc13efe043800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cinta-49 (npm)

Source: amazon-inspector 6279bee54d20c9068fed5ac4fb49abe768d96cd657f2d5a3e9335c49c3c3af5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in aril-49 (npm)

Source: amazon-inspector 42277d7c7e46f9b5bc7a56f62c0378c88b2237b988ae45185f7f676f1b31bce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in alvira-49 (npm)

Source: amazon-inspector bca25fd7d20d7b0ed64cb7e95edcd59f6130efb9ee0fb5c0b5b290f7c8b39523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in alvino-49 (npm)

Source: amazon-inspector 37974db33adff9c375ba5c6c1a22daf32b288784ce87644a346037ad20bb099b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious Package

Overview aril-49 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

JLSEC-2026-1023 ImageMagick has an Infinite Loop in subimage-search with crafted image

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search operation can happen when using a crafted image. This issue has been patched in versions 6.9.13-49 and 7.1.2-24...

CLEANSTART-2026-IA01903 Security fixes in renovate 43.4.3-r1

Package renovate version 43.4.3-r1 fixes 49 vulnerabilities: ghsa-8wc6-vgrq-x6cf, CVE-2026-28292, ghsa-r275-fr43-pm7q, CVE-2026-25896, ghsa-m7jm-9gc2-mpf2...