MAL-2025-151996 Malicious code in air-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e681304b3664835e8a2e56ed0cecf6bf36dfbe6b548832a9640963319b9e74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91e21cabeb508ef4dfacb2bf4856ee698d6d0f0e8806106a3c5e0dfc3c8c209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef93e5c787b88a98e35ebca4baada9b6788af46f21a64961273b8fb06deddb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302815d836374e07eba2051516f75c13a952645ef53239f9f89601b94481d44a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152023 Malicious code in air-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0d071c0694c3c22a3951e3426efb4cf3f615941f75cf4873ff20745fda0344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152001 Malicious code in air-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79bdf3d9f200642ee404437512065b3b3f0b9fd4b39598105e7479312a2cb53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152019 Malicious code in air-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeec2df43935e58d49a8610b75298a729b6335789e95ce61330dadd5736c35c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152006 Malicious code in air-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91e21cabeb508ef4dfacb2bf4856ee698d6d0f0e8806106a3c5e0dfc3c8c209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152004 Malicious code in air-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd302e84318f8a43afc8e79faaf8cdb96e1ab0aaaaf40464a0aba33dece8de03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152034 Malicious code in air-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb2fa9164bfd4dcfb261c5cc3956a5baa98949ecd5670af13d05d9529a0e6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152007 Malicious code in air-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b0ff94da847e2f0638984c15fa443b25104d21a1614303d4a94136e17167cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152043 Malicious code in air-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85703d875fe60f5c5dfc35ce8601cb18affe8bbb2b2200749b2ec9d2b259d261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152040 Malicious code in air-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302815d836374e07eba2051516f75c13a952645ef53239f9f89601b94481d44a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Synergistic Development of Cybersecurity and Functional Safety for Smart Electric Vehicles

The introduction of Smart Electric Vehicles SEVs represents an increasingly disruption on automotive area, once integrates advanced computer and communication technologies to highly electrical cars, which come with high performances, environment friendly and user friendly characteristics . But th...

CVE-2025-58986

Missing Authorization vulnerability in ganddser Jock On Air Now JOAN joan allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Jock On Air Now JOAN: from n/a through = 6.0.4...

CVE-2025-61956

Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control ATC and pilots...

EUVD-2025-38136

Missing Authorization vulnerability in ganddser Jock On Air Now JOAN joan allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Jock On Air Now JOAN: from n/a through = 6.0.4...

CVE-2025-58986

CVE-2025-58986 concerns WordPress plugin JOAN (Jock On Air Now) with vulnerable versions up to 6.0.4, describing a Missing Authorization issue due to incorrectly configured access control. Red Hat and NVD entries confirm this vulnerability affects JOAN versions

WordPress plugin Jock On Air Now (JOAN) 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

Smartphone User Fingerprinting on Wireless Traffic

Due to the openness of the wireless medium, smartphone users are susceptible to user privacy attacks, where user privacy information is inferred from encrypted Wi-Fi wireless traffic. Existing attacks are limited to recognizing mobile apps and their actions and cannot infer the smartphone user...