Mozilla Thunderbird < 52.3

The version of Thunderbird installed on the remote Windows host is prior to 52.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-20 advisory. - Mozilla developers and community members Masayuki Nakano, Gary Kwong, Ronald Crane, Andrew McCreight, Tyson Smith,...

CVE-2025-46428

creationtimestamp| type| source ---|---|--- 2025-11-12 20:45:51+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115538680301921527 2025-11-12 22:20:52+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hopyono6s2 2025-11-12 22:24:21+00:00...

EUVD-2025-143534

Malicious code in alvino-20 npm...

Malicious code in alvino-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2046bdc1d9658658cbc26e65152a21ae040284ca04af748feef8f2d1cde8a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbace56e2e81475bd5b711090d5b44de89a1903e1d03a01336fc1d91abb16f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141524

Malicious code in hokage-20 npm...

Malicious code in ira-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7a15529efa8aade43cb9be7a722c1b12b9b293b58ee214493e3b2e8f684e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141312

Malicious code in ira-20 npm...

EUVD-2025-140423

Malicious code in lia-20 npm...

EUVD-2025-137076

Malicious code in riya-20 npm...

MAL-2025-178300 Malicious code in riya-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbace56e2e81475bd5b711090d5b44de89a1903e1d03a01336fc1d91abb16f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174756 Malicious code in hokage-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb39ab6b851f7f2030acacd57b16abfe0fae4032eda97d7affa9e93b2437077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154048 Malicious code in cinta-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d0781fb09d9a45e9ac83e7ea37d432eecc8ff6bdf50e07aaa13b8353a8cf4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29d2518400e56a04587ccefe93d6b060fa5f5da1a5a9c1acdce2743f3db3569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3098204118f79880cd45ed077f9f5db7d7db7bb64a79ca05b5d4db9551939979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf73f43860555012c3c7bfbfabe7db726f4a4145291c446a5345071d8342aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82edd86c24f6853c85b1184697561ba10076b67ba638115439838ae57c368c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6fff66789385d79aa31df1d7d519581d1ef5e0c4601f5ba70d3a2ffc4ed6ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154302 Malicious code in dia-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc1122ae37ac58cf09041bbf6d124020c4b1f9d09c3e2b1ac64a0f62119194d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d0781fb09d9a45e9ac83e7ea37d432eecc8ff6bdf50e07aaa13b8353a8cf4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...