MAL-2025-50046 Malicious code in cici-kemplang36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4220e30241abfdb86914f3a80c538d73436d766bf7a322053d67f8da9a6933e4 The package cici-kemplang36-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in fauzi-toge93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b115318608158085eb4101b189f2d25ebd0770ef5fa412dd9c77365dd046fffb The package fauzi-toge93-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in dewi-kembang44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59c0069376d1195f0d35fdfd44ce33277a0602d1bd66b1eb386d5637707f39d The package dewi-kembang44-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-51632 Malicious code in eka-jamblang10-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb59b409dc52f8b4559b53bb9d91754c672f0251696e9ac949487a8dbc46dc2 The package eka-jamblang10-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

CVE-2025-12922

creationtimestamp| type| source ---|---|--- 2025-11-10 02:16:01+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5akhtlglfx2 2025-11-10 03:41:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5apc5rc2l2u...

CVE-2025-12914

creationtimestamp| type| source ---|---|--- 2025-11-09 00:37:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m55uk3ol422w 2025-11-09 00:55:17+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m55vitgmd322...

CVE-2025-12915

creationtimestamp| type| source ---|---|--- 2025-11-09 00:32:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m55ub5ba3k2w 2025-11-09 00:55:18+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m55vizwzit22 2025-11-09 01:32:02+00:00| seen|...

MAL-2025-49392 Malicious code in focusync-custom-controls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83979de8b383c0a28ec2fea476c2842bafabcb6e5abfe06e4253a9c1ab713234 The package focusync-custom-controls was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-191929 Malicious code in wei516-enconly (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3e40931688b41ac8340ab8f27604ba32f1ea6e364df1e614343cbc4cf0df50e8 Package seems to provide an MCP server, but in fact contains attempts to make an LLM agent break safeguards. As the request is about leaves just a flag, it see...

CVE-2025-21077

Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege...

CVE-2025-21079

Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...

MAL-2025-49365 Malicious code in dunnhumby-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b047f32f0323beace719a36eec364b2d804d556202950dae7942b04e2f2b09a The package dunnhumby-component-library was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49364 Malicious code in supply_chain_supplyer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb82b4b36d6e82b7dff16e757aab9bf7ffce58bcd579bd38ad7cdd98da4c3e5 The package supplychainsupplyer was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-21079

Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...

CVE-2025-21079

Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...

CVE-2025-21077

Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege...

CVE-2025-21079

Samsung Members before version 5.5.01.3 has an input validation flaw that allows a remote attacker to connect to an arbitrary URL and launch arbitrary Samsung Members–privileged activities. User interaction is required to trigger the issue. Public sources in multiple feeds corroborate this CVE (C...

CVE-2025-21079

Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...

CVE-2025-21079

Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...

CVE-2025-46556

Mantis Bug Tracker MantisBT is an open source issue tracker. Versions 2.27.1 and below allow attackers to permanently corrupt issue activity logs by submitting extremely long notes tested with 4,788,761 characters due to a lack of server-side validation of note length. Once such a note is added,...