MAL-2025-153848 Malicious code in bitha-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063a1e68db871f95b5b67cbda769828dd0a66fc3eecaa550aaf580fe22d06daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial_worm_amethyst-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d814620e8ea30b37d6059bd57d57357234f0c1640f7c82340a6b00c1ee31652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77555

Malicious code in notabletapirsalmon-50 npm...

CVE-2025-34272

creationtimestamp| type| source ---|---|--- 2025-10-30 23:50:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4h5p5mkjj2x...

CVE-2025-53061

creationtimestamp| type| source ---|---|--- 2025-10-28 16:50:27+00:00| seen| Telegram/FX8BDpXzJgwDFor5SWYyZ6IZoyW-M2tAlnHY8QJouqsGAo...

CVE-2025-54963

creationtimestamp| type| source ---|---|--- 2025-10-28 16:50:25+00:00| seen| Telegram/1MbiUsSvFCXYvXoHv6yLqOGQJgSUKvFUF4c8YtvhIRycNSw...

CVE-2025-8078

CVE-2025-8078 describes a post-authentication command-injection vulnerability in Zyxel devices: Zyxel ATP series firmware v4.32–v5.40, USG FLEX series v4.50–v5.40, USG FLEX 50(W) series v4.16–v5.40, and USG20(W)-VPN series v4.16–v5.40. An authenticated administrator can pass a crafted string as a...

CVE-2025-57837

creationtimestamp| type| source ---|---|--- 2025-10-20 08:50:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3mgqc6fs42h...

CVE-2025-20716

creationtimestamp| type| source ---|---|--- 2025-10-14 13:44:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372817715516192...

CVE-2025-9868

creationtimestamp| type| source ---|---|--- 2025-10-08 18:11:50+00:00| seen| Telegram/4KG67DD29o3TU6aSEXidt7nDTffAtCLraApQ-MEi3GwjeAE...

EUVD-2020-17846

Malware in sbrugna...

EUVD-2020-6104

Malware in sbrugna...

EUVD-2005-2425

Malware in sbrugna...

EUVD-2020-17842

Malware in sbrugna...

EUVD-2017-18595

Malware in sbrugna...

CVE-2025-59944

creationtimestamp| type| source ---|---|--- 2025-10-04 06:50:10+00:00| seen| https://bsky.app/profile/test001-05.bsky.social/post/3m2dykm6v5o2d 2025-10-13 07:13:56+00:00| seen| https://bsky.app/profile/gadievron.bsky.social/post/3m32o3dcwqc2v...

RockyLinux 9 : xterm (RLSA-2025:7427)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7427 advisory. xterm: code execution via OSC 50 input sequences CVE-2022-45063 Tenable has extracted the preceding description block directly from the RockyLinux security...

CVE-2024-36326

creationtimestamp| type| source ---|---|--- 2025-09-06 20:05:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly6xxlcjgh26...

CVE-2025-9618

creationtimestamp| type| source ---|---|--- 2025-08-30 06:54:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxlyipn3nk2v...

Linux Distros Unpatched Vulnerability : CVE-2025-30193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In some circumstances, when DNSdist is configured to allow an unlimited number of queries on a single, incoming TCP connection from a client, an attacker can...