214 matches found
Malicious code in stingy-bronze-chameleon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c9605a86ccacc6c5f074e797c2960def71471e5875bbf7c8c8402078d88fb2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-70852 Malicious code in stingy-bronze-chameleon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c9605a86ccacc6c5f074e797c2960def71471e5875bbf7c8c8402078d88fb2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52033
Malicious code in silent-coffee-chameleon npm...
Malicious code in domestic-crimson-chameleon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1144e03351ab848caa6de99c78bfb03b85171e9d5f65e8aacb92f33f3c7bd120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-49550
Malicious code in qualifiedchameleonz3n npm...
EUVD-2025-50737
Malicious code in adversechameleonz3n npm...
EUVD-2025-49482
Malicious code in resonantchameleonz3n npm...
EUVD-2025-50342
Malicious code in dutchchameleonz3n npm...
MAL-2025-60327 Malicious code in dutch_chameleon_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb13eeeda705eba153518bad2624154fa5136776cf901997ff70608bdf49f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dutch_chameleon_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb13eeeda705eba153518bad2624154fa5136776cf901997ff70608bdf49f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-48222
Malicious code in defensivechameleonz3n npm...
EUVD-2025-47596
Malicious code in formalchameleonz3n npm...
A Cybercrime Merger Like No Other — Scattered Spider, LAPSUS$, and ShinyHunters Join Forces
The nascent collective that combines three prominent cybercrime groups, Scattered Spider, LAPSUS$, and ShinyHunters, has created no less than 16 Telegram channels since August 8, 2025. "Since its debut, the group's Telegram channels have been removed and recreated at least 16 times under varying...
A Comparative Study of Hybrid Post-Quantum Cryptographic X.509 Certificate Schemes
As quantum computing hardware continues to advance, the integration of such technology with quantum algorithms is anticipated to enable the decryption of ciphertexts produced by RSA and Elliptic Curve Cryptography ECC within polynomial time. In response to this emerging threat, the U.S. National...
Phishing scam uses fake death notices to trick LastPass users
LastPass has alerted users about a new phishing attack that claims the recipient has died. According to the message, a family member has submitted a death certificate to gain access to the recipient’s password vault. A link in the phishing email, supposedly to stop the request, leads to a fake pa...
CVE-2022-50522
The CVE-2022-50522 entry corresponds to a Linux kernel issue in mcb-parse (chameleon_parse_gdd). When mcb_device_register() returns an error, the refcount for the bus and device name is leaked. The fix adds a put_device() to relinquish the reference so resources can be released during mcb_release...
CVE-2022-50522 mcb: mcb-parse: fix error handing in chameleon_parse_gdd()
In the Linux kernel, the following vulnerability has been resolved: mcb: mcb-parse: fix error handing in chameleonparsegdd If mcbdeviceregister returns error in chameleonparsegdd, the refcount of bus and device name are leaked. Fix this by calling putdevice to give up the reference, so they can b...
CVE-2022-50522
In the Linux kernel, the following vulnerability has been resolved: mcb: mcb-parse: fix error handing in chameleonparsegdd If mcbdeviceregister returns error in chameleonparsegdd, the refcount of bus and device name are leaked. Fix this by calling putdevice to give up the reference, so they can b...