MAL-2025-152043 Malicious code in air-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85703d875fe60f5c5dfc35ce8601cb18affe8bbb2b2200749b2ec9d2b259d261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152034 Malicious code in air-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb2fa9164bfd4dcfb261c5cc3956a5baa98949ecd5670af13d05d9529a0e6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd302e84318f8a43afc8e79faaf8cdb96e1ab0aaaaf40464a0aba33dece8de03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152006 Malicious code in air-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91e21cabeb508ef4dfacb2bf4856ee698d6d0f0e8806106a3c5e0dfc3c8c209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151999 Malicious code in air-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cca7df148f1f1afd47e05ef5fe33345439856f44eaccfd4dc5121f957da2958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152008 Malicious code in air-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbba6c886bc9f3b8ffc0da8475c836a102405cbe25ff896fa8941f1a1b54f21a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152007 Malicious code in air-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b0ff94da847e2f0638984c15fa443b25104d21a1614303d4a94136e17167cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152002 Malicious code in air-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3eecbd23037d7be05e575d5f74ef289d9a18340d23cf9473ca5cc5d43000e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152001 Malicious code in air-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79bdf3d9f200642ee404437512065b3b3f0b9fd4b39598105e7479312a2cb53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152019 Malicious code in air-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeec2df43935e58d49a8610b75298a729b6335789e95ce61330dadd5736c35c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70902ef95f5216486736aaedc05d335c6ae9f52f81729832bfea6e21b99af31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152004 Malicious code in air-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd302e84318f8a43afc8e79faaf8cdb96e1ab0aaaaf40464a0aba33dece8de03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152023 Malicious code in air-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0d071c0694c3c22a3951e3426efb4cf3f615941f75cf4873ff20745fda0344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Synergistic Development of Cybersecurity and Functional Safety for Smart Electric Vehicles

The introduction of Smart Electric Vehicles SEVs represents an increasingly disruption on automotive area, once integrates advanced computer and communication technologies to highly electrical cars, which come with high performances, environment friendly and user friendly characteristics . But th...

CVE-2025-58986

Missing Authorization vulnerability in ganddser Jock On Air Now JOAN joan allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Jock On Air Now JOAN: from n/a through = 6.0.4...

CVE-2025-61956

Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control ATC and pilots...

CVE-2025-58986

CVE-2025-58986 concerns WordPress plugin JOAN (Jock On Air Now) with vulnerable versions up to 6.0.4, describing a Missing Authorization issue due to incorrectly configured access control. Red Hat and NVD entries confirm this vulnerability affects JOAN versions

EUVD-2025-38136

Missing Authorization vulnerability in ganddser Jock On Air Now JOAN joan allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Jock On Air Now JOAN: from n/a through = 6.0.4...

WordPress plugin Jock On Air Now (JOAN) 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

Smartphone User Fingerprinting on Wireless Traffic

Due to the openness of the wireless medium, smartphone users are susceptible to user privacy attacks, where user privacy information is inferred from encrypted Wi-Fi wireless traffic. Existing attacks are limited to recognizing mobile apps and their actions and cannot infer the smartphone user...