Malicious code in rita-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ee118bb4e39dfe6aeec7ce56d8658273ae224a12e2b220b07c0a6a0f2c6f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155698 Malicious code in hariyono-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c31147643a78eebfac7a006ac9f261d5ebd155c71a031e252e7f4d02faf5c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_donkey_tomato-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23347f4a598724598806988ab9b5e1b0e89f8233e1f61fc3b86a5e574665ab8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key_frog_salmon-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733e248168c21e062596b6724ecb65227ed6e4f26c6d6fbcd87b4cf8d218bf53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rural_krill_magenta-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26224fe2c214d18c130d749852971c9ed73b7537945e97a7aa962c0f187b7370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112272 Malicious code in rural_krill_magenta-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26224fe2c214d18c130d749852971c9ed73b7537945e97a7aa962c0f187b7370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74358

Malicious code in poorwolverinebronze-90 npm...

EUVD-2025-74506

Malicious code in keyfrogsalmon-90 npm...

EUVD-2025-77609

Malicious code in gratefullynxolive-90 npm...

EUVD-2025-77596

Malicious code in identicalcanidaetomato-90 npm...

MAL-2025-103928 Malicious code in identical_canidae_tomato-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12c4b1136140bc38c94f806b31a05c0835dde6b204b22ca4bbc65b72ce06669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Important Photon OS Security Update - PHSA-2025-5.0-90-0665

Updates of 'libtiff' packages of Photon OS have been released...

EUVD-2021-16449

Malware in sbrugna...

EUVD-2021-16432

Malware in sbrugna...

EUVD-2021-16430

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2021-29976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird. Some of these bugs showed evidence of memory corruption a...

Critical Photon OS Security Update - PHSA-2025-5.0-90-0579

Updates of 'libtiff', 'iperf' packages of Photon OS have been released...

Malicious code in boost-chii-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9518633beab55d7e221176d4550e41e83c9848a890b6ca4c77a384be7a2a17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5900 Malicious code in boost-chii-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9518633beab55d7e221176d4550e41e83c9848a890b6ca4c77a384be7a2a17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-29973

Password autofill was enabled without user interaction on insecure websites on Firefox for Android. This was corrected to require user interaction with the page before a user's password would be entered by the browser's autofill functionality This bug only affects Firefox for Android. Other...