PT-2026-46000

Mercusys AC12G EU V1 with firmware AC12GEU V1 200909 enables WPS 2.0 by default with a weak lockout policy 60-second lockout after 10 attempts...

Google Chrome Security Update (stable-channel-update-for-desktop_13-2026-01) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

MiracleLinux 9 : kernel-5.14.0-570.33.2.el9_6 (AXSA:2025-10783:60)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10783:60 advisory. kernel: crypto: algifhash - fix double free in hashaccept CVE-2025-38079 kernel: wifi: ath12k: fix invalid access to memory CVE-2025-38292 Tenable...

MAL-2025-172809 Malicious code in alvino-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d3ce31368a58c50f43b9a60422bbf4775bfe0e746fdf4d1959ec99cabc654cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d3ce31368a58c50f43b9a60422bbf4775bfe0e746fdf4d1959ec99cabc654cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143494

Malicious code in alvino-60 npm...

MAL-2025-152502 Malicious code in alvira-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d45767cc599b572befad31a6c79caf3fd43234b4da7f54a954a46ee9bba1f19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3745f12b8365ca0d689534c46b2b3fb153d05411cb1e2af5216a2f1646d5915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154092 Malicious code in cinta-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54f1cd29a1bffa6e4e9c8a0396b4d552d6f69f39df177d85b130086d196392c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160847 Malicious code in muklis-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe97a06a7264871c7b180742be19757aa440adeea8fd787ddce8d152e897232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78fc774ec87d8ac007fada877faa60cb34e078e10081f026a9a0a12afea3b9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0f0b474fa8c851dadd80b0db20a8dc13fcb89d916cbb5607b64ac3e6773ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152862 Malicious code in aril-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78fc774ec87d8ac007fada877faa60cb34e078e10081f026a9a0a12afea3b9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe97a06a7264871c7b180742be19757aa440adeea8fd787ddce8d152e897232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153859 Malicious code in bitha-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1ac2bdcf1adafa472c3bf3ec6fbf8c5faffcbfaad26de60c377f970898a76b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74664

Malicious code in familiarchinchillacyan-60 npm...

EUVD-2025-74792

Malicious code in controlledporpoisetan-60 npm...

MAL-2025-111783 Malicious code in damp_spoonbill_coral-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b553fd7dab685bbe860784cb7a70e17623ebee04f9a85d0b2706c33572386fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74118

Malicious code in unsightlyboobyyellow-60 npm...

EUVD-2025-74751

Malicious code in desirablecoyotegreen-60 npm...