CVE-2025-60799

phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. The application allows unauthorized manipulation of session variables by accepting user-controlled parameters 'subject', 'server', 'database', 'queryid' without proper validation or access...

CVE-2025-55179

creationtimestamp| type| source ---|---|--- 2025-11-18 15:11:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115571338849048787...

⚡ Weekly Recap: Fortinet Exploited, China's AI Hacks, PhaaS Empire Falls & More

This week showed just how fast things can go wrong when no one's watching. Some attacks were silent and sneaky. Others used tools we trust every day — like AI, VPNs, or app stores — to cause damage without setting off alarms. It's not just about hacking anymore. Criminals are building systems to...

CVE-2025-46367

creationtimestamp| type| source ---|---|--- 2025-11-13 21:18:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5k3pgbcey2n...

Malicious code in alvino-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b1a35405ae7f4dbe2451e8bd88a0f05a9ef2fe69d02a7b60d750e3de136d6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140422

Malicious code in lia-21 npm...

EUVD-2025-143533

Malicious code in alvino-21 npm...

Malicious code in ira-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca39931f5676b79adb12e4d966add4a0f192e0284fec24c5df01ac5eb2d85c33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141523

Malicious code in hokage-21 npm...

Malicious code in lia-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304b446075ea6e90be552fbf306e7585cd07998d06205989cf20aa15a381e2a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0069a882440afcae5aa30837850cedcaf2720dcd08ce6f8cc62748e721a8997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137074

Malicious code in riya-21 npm...

EUVD-2025-141311

Malicious code in ira-21 npm...

Malicious code in ilop-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cedefbd86e9e3fc160743282ad792c645b3c5551453755fe03a0bbe74c992e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9414a291d0219aa8f0af7821b75b3fd6b4c34fcf41dfe3e393d86d63cc309f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 011da5195fed85779e9392205bdb7451471710c09ad47dcf60c3655485e05d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154049 Malicious code in cinta-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a530c7791e2bd88bc6cc39561b118fd959b9fdd92d2dedf81fcf2675a1ea08f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff84754d35939a9fc0b6f3a987a60a842bce5251eba6b037c4d09c05c0fe38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-21 (1.0.0)

aji-21 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-21 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152060...

Malicious code in wulan-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc194ed5539aca5e70458bd4f4dd1f0f085581dfd28b9a907ae7001c0efa0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...