MAL-2025-154304 Malicious code in dia-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa771970333a616dcc0a3b6d59a32b3eb2c070ab6d414ea7c734417c4b48ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159618 Malicious code in manda-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cac377d6ab932b74c12d516f8ad6d43453c815a9cd6ea4dc923c60c0bf00309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74440

Malicious code in molecularturkeyblack-22 npm...

EUVD-2025-74182

Malicious code in supportingconstrictorlavender-22 npm...

EUVD-2025-74177

Malicious code in surewrencopper-22 npm...

EUVD-2025-74689

Malicious code in estimatedjayamethyst-22 npm...

Malicious code in growing_kite_gray-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ab0f026222ced597e4fb0c991def80d92ace6f5033c8ed071c203a2b81fda8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77486

Malicious code in unevenmongooseivory-22 npm...

CVE-2025-11986 Crypto Tool <= 2.22 - Unauthenticated Information Exposure via Global Authentication State

The Crypto plugin for WordPress is vulnerable to Information exposure in all versions up to, and including, 2.22. This is due to the plugin registering an unauthenticated AJAX action wpajaxnoprivcryptoconnectajaxprocess that allows calling the register and savenft methods with only a...

CVE-2025-33150

creationtimestamp| type| source ---|---|--- 2025-11-10 22:23:39+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5cnskkyvmz2...

CVE-2025-63288

creationtimestamp| type| source ---|---|--- 2025-11-10 19:57:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5cfsbo4na2a...

CVE-2025-2534

creationtimestamp| type| source ---|---|--- 2025-11-07 19:21:22+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52sd72t7iu2...

CVE-2025-64450

creationtimestamp| type| source ---|---|--- 2025-11-05 06:22:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ufws6gn32s...

CVE-2024-14002

creationtimestamp| type| source ---|---|--- 2025-10-30 22:54:12+00:00| seen| Telegram/x772QyFUAUXwJwZgDZiQcLlOfeu8IBItbSsS8vAQSe8DHA...

CVE-2025-34278

creationtimestamp| type| source ---|---|--- 2025-10-30 22:53:54+00:00| seen| Telegram/qlVrYc0naWXptH9Kq74DiMvx8YRF6IYe3Cg1zRN1qldnzE...

CVE-2024-30110

creationtimestamp| type| source ---|---|--- 2025-10-30 18:56:22+00:00| seen| Telegram/Upu9IgqGnuKH6yRZWDCxUj5GQCLavyo94HUBgxUm0804M...

GHSA-RJ5C-58RQ-J5G5

creationtimestamp| type| source ---|---|--- 2025-10-28 22:37:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115454183590681546...

StarCharge Artemis AC Charger 安全漏洞

StarCharge Artemis AC Charger is an AC charger from StarCharge Singapore. A security vulnerability exists in the StarCharge Artemis AC Charger version 7-22 kW 1.0.4, which stems from the use of a hard-coded AES key, which could allow an attacker to forge or decrypt a valid login token...

CVE-2025-52264: Improper Restriction of Operations within the Bounds of a Memory Buffer

StarCharge Artemis AC Charger 7-22 kW v1.0.4 was discovered to contain a stack overflow via the cgiMain function at download.cgi...

CVE-2025-52263: Download of Code Without Integrity Check

An issue in the Web Configuration module of Startcharge Artemis AC Charger 7-22 kW v1.0.4 allows authenticated network-adjacent attackers to upload crafted firmware, leading to arbitrary code execution...