CVE-2025-65946

creationtimestamp| type| source ---|---|--- 2025-11-22 03:08:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m66t25imwg2b 2025-11-23 10:33:13+00:00| seen| https://infosec.exchange/users/offseq/statuses/115598556650095134 2025-11-23 10:33:14+00:00| seen|...

Opto 22 GRV-EPIC and groov RIO

RISK EVALUATION Successful exploitation of this vulnerability could result in the execution of arbitrary shell commands with root privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize...

Opto 22 groov RIO 操作系统命令注入漏洞

The Opto 22 groov RIO is an industrial remote I/O module from Opto 22 USA. An operating system command injection vulnerability exists in the Opto 22 groov RIO that stems from the unsafe use of header value build commands, which could lead to remote code execution...

CVE-2025-65933

creationtimestamp| type| source ---|---|--- 2025-11-19 05:22:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5xj3xxzie2n...

Mozilla Firefox < 62.0.2

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 62.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2018-22 advisory. - A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local...

Malicious code in alvino-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a99bb6475dafd7044efaabbca9a8ce04fb53c45aaba0f85e9daa42998c30192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141310

Malicious code in ira-22 npm...

EUVD-2025-143532

Malicious code in alvino-22 npm...

EUVD-2025-141522

Malicious code in hokage-22 npm...

EUVD-2025-137072

Malicious code in riya-22 npm...

EUVD-2025-140421

Malicious code in lia-22 npm...

Malicious code in riya-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b3cfda1569b9196cb5680a2d2f278ed98e4daf0a86153746db53d215425c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a65417cd3cc409af14585032d67f8c35c9af380afea24e5531cd33be4467438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174961 Malicious code in ira-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc904ef842c166a9c66c80c3cc7fbefecf7e869674ed5778dafa62823db499f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178302 Malicious code in riya-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b3cfda1569b9196cb5680a2d2f278ed98e4daf0a86153746db53d215425c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8807d80108b36413eed18c0533aefbe03a4aa4d092fb6d27fd1121573fa9b370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676dfc9152ed211ccc6a80b937bfd416e2ca1b8c0f603b80edc43a53e2910f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862add8b0b9aafebf28f5fad94d24e6459bfd1c6959a2b1aa67bca38fb741f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cceaaeeccd163861edcd1622cfb8c741d34a6a5d61e0c1b00e7bb30662ded4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11dc7521421ffc54808869eb79d682fc767c75870a365f8f3f06877a3023687c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...