ImageMagick-CVE-2022-44268-PoC

ImageMagick-CVE-2022-44268-PoC A bash script for easly exploiting ImageMagick Arbitrary File Read Vulnerability CVE-2022-44268 Image Magic version effected Version: ImageMagick 6.9.11-60 Q16 x8664 2021-01-25 https://imagemagick.org Copyright: C 1999-2021 ImageMagick Studio LLC License:...

Malicious code in kentung-60 (npm)

Source: amazon-inspector cb0f0b474fa8c851dadd80b0db20a8dc13fcb89d916cbb5607b64ac3e6773ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in junior_finch_peach-60 (npm)

Source: amazon-inspector 442a587228c5e5a14c0fe7f8b1373444397ca49dd5f9bb82f56d0681fbe75c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in intan-60 (npm)

Source: amazon-inspector 4921e2cdb0e8325b75903ef24d1e6492b988175777a2080e6c6ca38c0f935587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in icha-60 (npm)

Source: amazon-inspector 0334bf2f0c92fdde4010dc2de07b41fc187edfcfa2454262ecddbcd4dd8baaa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in familiar_chinchilla_cyan-60 (npm)

Source: amazon-inspector 3ed7a71b94c8ccc4769c60492b5efa8b604948e0da8dcdd4148219b9acc85621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in desirable_coyote_green-60 (npm)

Source: amazon-inspector 97ab26356b5ddb5241a91961a3d803f0fc6cde498b444b3db7dd65be540c3342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in damp_spoonbill_coral-60 (npm)

Source: amazon-inspector b553fd7dab685bbe860784cb7a70e17623ebee04f9a85d0b2706c33572386fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in controlled_porpoise_tan-60 (npm)

Source: amazon-inspector d2c53754afa6d2029b0e1c18bec5750517cd12e644b58e3a9ecc95440720b0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cinta-60 (npm)

Source: amazon-inspector e54f1cd29a1bffa6e4e9c8a0396b4d552d6f69f39df177d85b130086d196392c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in chubby_stingray_ivory-60 (npm)

Source: amazon-inspector 18faa010f3ca8d66c54218e2d0ce11844129752968cb5c5e9e0956dc2d1d462b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in aril-60 (npm)

Source: amazon-inspector 78fc774ec87d8ac007fada877faa60cb34e078e10081f026a9a0a12afea3b9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in alvira-60 (npm)

Source: amazon-inspector 5d45767cc599b572befad31a6c79caf3fd43234b4da7f54a954a46ee9bba1f19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in alvino-60 (npm)

Source: amazon-inspector 3d3ce31368a58c50f43b9a60422bbf4775bfe0e746fdf4d1959ec99cabc654cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

PT-2026-76509

Several NIP-46 and NIP-60 types used derived Debug implementations even though their fields contained credentials or decrypted application data. Formatting these values exposed NIP-46 connection secrets and request parameters, as well as NIP-60 private keys, Cashu bearer proofs, and quote...

PT-2026-76510

The NIP-47 response and notification parsers and the NIP-60 wallet event parsers decrypted relay-provided events before verifying their kind, computed event ID, signature, and expected wallet public key. The decryption peer was derived from the untrusted event author, so successful decryption did...

Malicious Package

Overview familiarchinchillacyan-60 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview icha-60 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

CVE-2026-12991

The lack of cryptographic mechanisms to ensure the integrity and authenticity of communications in Ghost Robotics' Vision 60 robot APK v5.5.0 exposes the system to man-in-the-middle attacks. An attacker located on the local network can use ARP spoofing and selective traffic blocking techniques to...

EUVD-2026-49181

The lack of cryptographic mechanisms to ensure the integrity and authenticity of communications in Ghost Robotics' Vision 60 robot APK v5.5.0 exposes the system to man-in-the-middle attacks. An attacker located on the local network can use ARP spoofing and selective traffic blocking techniques to...