Malicious code in rita-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ee118bb4e39dfe6aeec7ce56d8658273ae224a12e2b220b07c0a6a0f2c6f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_donkey_tomato-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23347f4a598724598806988ab9b5e1b0e89f8233e1f61fc3b86a5e574665ab8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74358

Malicious code in poorwolverinebronze-90 npm...

EUVD-2025-74506

Malicious code in keyfrogsalmon-90 npm...

Malicious code in key_frog_salmon-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733e248168c21e062596b6724ecb65227ed6e4f26c6d6fbcd87b4cf8d218bf53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rural_krill_magenta-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26224fe2c214d18c130d749852971c9ed73b7537945e97a7aa962c0f187b7370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112272 Malicious code in rural_krill_magenta-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26224fe2c214d18c130d749852971c9ed73b7537945e97a7aa962c0f187b7370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103928 Malicious code in identical_canidae_tomato-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12c4b1136140bc38c94f806b31a05c0835dde6b204b22ca4bbc65b72ce06669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77596

Malicious code in identicalcanidaetomato-90 npm...

EUVD-2025-77609

Malicious code in gratefullynxolive-90 npm...

EUVD-2021-16449

Malware in sbrugna...

EUVD-2021-16432

Malware in sbrugna...

EUVD-2021-16430

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2021-29976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird. Some of these bugs showed evidence of memory corruption a...

Malicious code in boost-chii-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9518633beab55d7e221176d4550e41e83c9848a890b6ca4c77a384be7a2a17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5900 Malicious code in boost-chii-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9518633beab55d7e221176d4550e41e83c9848a890b6ca4c77a384be7a2a17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-29973

Password autofill was enabled without user interaction on insecure websites on Firefox for Android. This was corrected to require user interaction with the page before a user's password would be entered by the browser's autofill functionality This bug only affects Firefox for Android. Other...

Schneider Modicon Ladder Logic Upload/Download

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Schneider Modicon Ladder Logic Upload/Download', 'Description' = %q The Schneider Modicon with Unity series of PLCs use Modbus function code 90...

Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero-Days

Microsoft on Tuesday shipped fixes to address a total of 90 security flaws, including 10 zero-days, of which six have come under active exploitation in the wild. Of the 90 bugs, nine are rated Critical, 80 are rated Important, and one is rated Moderate in severity. This is also in addition to 36...

ss.zxpipe.com Cross Site Scripting vulnerability OBB-3954953

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...