Malicious code in billa-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b80ff63d669f5830affad471d861ade73e6f5990ad1aee51ae5d6f6e554c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164949 Malicious code in rita-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f641631436c260a4922ad22d5d63f36930dbfe8a2dc0186df86feaaaf00a8343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154107 Malicious code in cinta-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0446c002c7e10776786fa52abe1c691ae8dafc65d9ae1a4626ff292c0c64a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1046b9de4d31c766b9a2d6b1c53bada4175dd30379edf0df6c9c0beeb8d263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda81f924f941dc278f3d94b1a5e567d0801f31d27a5bdd6288016e2f56f6db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74622

Malicious code in furiouswrencopper-74 npm...

EUVD-2025-74584

Malicious code in harshroundwormivory-74 npm...

EUVD-2025-74688

Malicious code in estimatedviperolive-74 npm...

EUVD-2025-74555

Malicious code in idealcrocodileblue-74 npm...

MAL-2025-112010 Malicious code in inclined_possum_salmon-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd467acc34f3caacae55a820c94ec51f73d72b684d7bf2cb990c23d3eb59e4e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71773

Malicious code in wolfemerald-74-tisubasah npm...

EUVD-2018-0812

Malware in sbrugna...

EUVD-2020-28614

Malware in sbrugna...

Mozilla Firefox ESR < 115.28

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.28. It is, therefore, affected by a vulnerability as referenced in the mfsa2025-74 advisory. - Integer overflow in the SVG component. This vulnerability affects Firefox 143, Firefox ESR 115.28, Firefox ESR...

Adobe Illustrator < 28.7.9 / 29.0.0 < 29.7.0 Multiple Vulnerabilities (APSB25-74) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 28.7.9, 29.7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-74 advisory. - Stack-based Buffer Overflow CWE-121 potentially leading to Arbitrary code execution CVE-2025-49564 -...

Linux Distros Unpatched Vulnerability : CVE-2020-6814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of these bugs showed evidence of memory corruption and we presume...

CVE-2020-7475

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', reflective DLL, vulnerability exists in EcoStruxure Control Expert all versions prior to 14.1 Hot Fix, Unity Pro all versions, Modicon M340 all versions prior to V3.20, Modicon M580 all...

CVE-2020-7489

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software versions in security notification. The result of this vulnerability, DLL substitution, coul...

Linux Distros Unpatched Vulnerability : CVE-2020-6810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscree...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to jsonpath-plus (CVE-2024-21534) and cookie (CVE-2024-47764)

Summary IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to jsonpath-plus CVE-2024-21534 and cookie CVE-2024-47764. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2024-21534 DESCRIPTION: Versions of the package...