Malicious code in aril-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78fc774ec87d8ac007fada877faa60cb34e078e10081f026a9a0a12afea3b9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160847 Malicious code in muklis-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe97a06a7264871c7b180742be19757aa440adeea8fd787ddce8d152e897232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152502 Malicious code in alvira-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d45767cc599b572befad31a6c79caf3fd43234b4da7f54a954a46ee9bba1f19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74118

Malicious code in unsightlyboobyyellow-60 npm...

EUVD-2025-74664

Malicious code in familiarchinchillacyan-60 npm...

Malicious code in damp_spoonbill_coral-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b553fd7dab685bbe860784cb7a70e17623ebee04f9a85d0b2706c33572386fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74751

Malicious code in desirablecoyotegreen-60 npm...

EUVD-2025-74792

Malicious code in controlledporpoisetan-60 npm...

MAL-2025-111783 Malicious code in damp_spoonbill_coral-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b553fd7dab685bbe860784cb7a70e17623ebee04f9a85d0b2706c33572386fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77505

Malicious code in supposedgerbilbronze-60 npm...

CVE-2025-41110

Encrypted WiFi and SSH credentials were found in the Ghost Robotics Vision 60 v0.27.2 APK. This vulnerability allows an attacker to connect to the robot's WiFi and view all its data, as it runs on ROS 2 without default authentication. In addition, the attacker can connect via SSH and gain full...

CVE-2025-41110

Encrypted WiFi and SSH credentials were found in the Ghost Robotics Vision 60 v0.27.2 APK. This vulnerability allows an attacker to connect to the robot's WiFi and view all its data, as it runs on ROS 2 without default authentication. In addition, the attacker can connect via SSH and gain full...

CVE-2025-41110

CVE-2025-41110 affects Ghost Robotics Vision 60, specifically APK v0.27.2. The issue arises from an authorization flaw in the ROS 2 stack, permitting connections to the robot’s WiFi and SSH without authentication. Consequences stated across sources include data exposure and full control of the ro...

CVE-2025-41108

The CVE describes Ghost Robotics Vision 60 (v0.27.2) as vulnerable due to a lack of encryption and authentication in its MAVLink-based communication protocol. This enables an external attacker to impersonate the control station and issue arbitrary commands to the robot, potentially gaining unauth...

Ghost Robotics Vision 60 授权问题漏洞

Ghost Robotics Vision 60 is a quadrupedal ground robot from Ghost Robotics, USA. Ghost Robotics Vision 60 version v0.27.2 suffers from an authorization issue vulnerability that stems from WiFi and SSH credential disclosure, which could lead to an attacker connecting to the robot's WiFi and SSH to...

EUVD-2005-0682

Malware in sbrugna...

EUVD-2019-4098

Malware in sbrugna...

CVE-2024-40116

An issue in Solar-Log 1000 before v2.8.2 and build 52-23.04.2013 was discovered to store plaintext passwords in the export.html, email.html, and sms.html files -- fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base...

APT-C-60 Hackers Exploit StatCounter and Bitbucket in SpyGlace Malware Campaign

The threat actor known as APT-C-60 has been linked to a cyber attack targeting an unnamed organization in Japan that used a job application-themed lure to deliver the SpyGlace backdoor. That's according to findings from JPCERT/CC, which said the intrusion leveraged legitimate services like Google...

Adobe Illustrator < 26.5.2 / 27.0.0 < 27.0.1 Multiple Memory leak (APSB22-60) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 26.5.2, 27.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-60 advisory. - Adobe Illustrator versions 26.5.1 and earlier, and 27.0 and earlier are affected by an out-of-bounds re...