Malicious code in joko-lapis98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 550a134328f80ffa4b1dfb72f16fc3c3ab2c001ee2f672aba812e18216f7dcb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-mangga63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36d6d90ef61c72754a6fb679385c6fb04c10325311f1b58bad8b9d73881b8d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66177 Malicious code in wibowo-sambel7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211269c5dfe5927b77a77ea0667aa421a93c8d91e815ad2c860d5c418749e07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Introducing Nylon Face Mask Attacks: A Dataset for Evaluating Generalised Face Presentation Attack Detection

Face recognition systems are increasingly deployed across a wide range of applications, including smartphone authentication, access control, and border security. However, these systems remain vulnerable to presentation attacks PAs, which can significantly compromise their reliability. In this wor...

Amazon Linux 2 : pam, --advisory ALAS2-2025-3057 (ALAS-2025-3057)

The version of pam installed on the remote host is prior to 1.1.8-23. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3057 advisory. A flaw was found in linux-pam. The pamnamespace module may improperly handle user-controlled paths, allowing local users to exploit...

Microsoft Dynamics 365 跨站脚本漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. It is used for financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 Field Service...

Malicious code in favourable_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5452761e1a3a92e1dab9f932f55f17ee9123a50cdfbadf375d80fec9e8df12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61493 Malicious code in traditional_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a079749619fd72f83d44fe744d30a630485b6889d567a05e699a265bcdba09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfactory_reindeer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5d5c02ace91c1d0ee4f26a7dc4d0547dba771e0f788a8b954c087f841f9f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61546 Malicious code in urban_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2a3c8fc59135099de71705130769b28bfbb7ccd908d9681c00ad32fcca7f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59543 Malicious code in working_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bc011fa09f1347e5b42ed5c27f1e24bfaa0c45aa9ad5942e3bd331f6b32ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56999 Malicious code in joko-bakwan12-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0845808309825994c1b18adc95af25804a1a3dd25289321fb59ea096ea78868e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55261 Malicious code in arif-toge88-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef0afc7df1b37029a7288114c208ef8f231f5fafdadbea000fc79131b3249bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

A week in security (November 3 – November 9)

Last week on Malwarebytes Labs: Malwarebytes scores 100% in AV-Comparatives Stalkerware Test 2025 Fake CAPTCHA sites now have tutorial videos to help victims install malware Hackers commit highway robbery, stealing cargo and goods Android malware steals your card details and PIN to make instant A...

Malicious code in patria-lepet37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bebff54ccfa0b6d72ad9cbcc113274c442fce47fcdc8248fd1d7fd60fe58c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-asinan37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5535a9c8f16c77d57a311260ae1914da1049abaecdee2745e95ee162e1040d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51025 Malicious code in bella-dodol8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a38a638662e2f9f74786179f48b83c75228086da85fcbcb614d3648c0388b4 The package bella-dodol8-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 9.6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Oracle Linux 8 : bind (ELSA-2025-19835)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19835 advisory. - Address various spoofing attacks CVE-2025-40778 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 8 : bind9.16 (ELSA-2025-19793)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19793 advisory. - Prevent cache poisoning due to weak PRNG CVE-2025-40780 - Address various spoofing attacks CVE-2025-40778 Tenable has extracted the preceding...