Malicious code in zul-semur94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f1ae7cf01db1c58310c714cb7d81aba0dec2b79e6aacc993bfc6461135b6cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-gembus74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691ea7d77633d97550a2c6187c432cb449a4218d25c912f46b766c8a5ac0b488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-sego40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2eef7e6b4419f75e245543499893a8fe34993435b067069523aae5ea9310362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78848 Malicious code in ida-gembus28-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18fa68aaf34fcb7183c041d15b58d8c26a7edc3a1de069165568088d7a721e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-mieaceh2-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0294ed2d789cb59fcf6d11ee9d71a9be649d4c2196c8962d4e183d1cb6e4c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-mieaceh93-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd77baa9497d71ed6bcc87f37b9a1a5c6d50655e874905aa99e3317c1238540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-wajit48-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2303e449c386bd30cb299acb86506a05d4363add88423825a703b0a7a90a7e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protective-tan-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d6c43208430563b7c39c8b629faa641d9dc45406843bcd8d37835e063f3e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in doubtful_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf41302790eaef211014bc8e311705198f3633d2a24893fd3cbd10d7f57130e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-semur37-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538956a489d4f24743e24993a20787b499f6e39774f55bdfb494efbfae06f8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sure_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a467afd767b7ccd879603369a27a2418e2aa4ef28e5e4d940bb5426c6107a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56914 Malicious code in iwan-gorengan81-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973b7e14b49e5222efd52ee5b3a40942140d8b5570181535b08c05a803b31977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lapis9-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56e56b5edf5040b15e8b2a5e4a7710e8e34a188467dac8330b8654d5c6475861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-donat34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e25ae2aa8ae46ca0c034a57beb6a696464516cd86713c468da561dbc2ffedd The package eka-donat34-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

September 10, 2024—KB5043129 (Monthly Rollup)

None None...

IBM Robotic Process Automation 安全漏洞

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. can help you automate more business and IT processes at scale with the ease and speed of traditional RPA. An information disclosure vulnerability exists in IBM Robotic Process...

nuclei-templates

This repository is a collection of templates for the nuclei engine, a tool used to find security vulnerabilities in applications. The templates are used to identify potential vulnerabilities and are contributed by both the project's team and the community. The repository contains various template...

CVE-2021-26110

An improper access control vulnerability CWE-284 in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0.12 and below and FortiProxy 2.0.1 and below, 1.2.9 and below may allow an authenticated low-privileged attacker to escalate their privileges to superadmin via a specific crafted...

Fortinet FortiOS 安全漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. An access control error...

CVE-2018-20468

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A web reports module has "export to excel features" that are vulnerable to CSV injection. An attacker can embed Excel formulas inside an automation script that, when exported after execution, results in code execution...