EUVD-2025-133556

Malicious code in teate-thy-sonic-awhaw npm...

EUVD-2025-139789

Malicious code in nokire-nakaocil19 npm...

EUVD-2025-145458

Malicious code in isabellejones npm...

Malicious code in samehada-aazs-r7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68927e2f0e9d7f209bacec1135dae53e5551c2a681e46e246c5a02eaf48b56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alo1f-danaipik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06dc98109197fb19f0fba5193e926477f9255b54cd85a576ac6624fbca37f7e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147331

Malicious code in uaragia-mudahai-syuf npm...

Update: Implementation Guidance for Emergency Directive on Cisco ASA and Firepower Device Vulnerabilities

CISA has released Emergency Cisco Directive 25-03 Implementation Guidance to assist federal agencies in addressing critical vulnerabilities in Cisco Adaptive Security Appliances ASA and Firepower devices. Emergency Directive 25-03: Identify and Mitigate Potential Compromise of Cisco Devices, issu...

Malicious code in format-fns (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526920f308cc3493a6a3bc9f9e6c7869e0d79392a5ad4c3d20853f93c1be3347 The package format-fns was found to contain malicious code. Source: ghsa-malware a2305cdbb291326c8e91c15e88648a66dff9f0cdcee605ff604ec85ef226b91a Any...

MAL-2025-149903 Malicious code in format-fns (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526920f308cc3493a6a3bc9f9e6c7869e0d79392a5ad4c3d20853f93c1be3347 The package format-fns was found to contain malicious code. Source: ghsa-malware a2305cdbb291326c8e91c15e88648a66dff9f0cdcee605ff604ec85ef226b91a Any...

MAL-2025-140554 Malicious code in centaurus-spectron-element-ui-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f837f351f411dbd9ba14f5048c27f41b8ff221f3d7ebfb2b720b4aef68c1c6f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141588 Malicious code in dependencies-venus-install-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2229483646722536d85ff104226a170ef6e531b8eeef988858eb5722a8adb0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139734 Malicious code in auth-yaml-slides-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d881b1b3d4ec241b1d53851ebff5ff1140a61b69a53a01c345a14b962fc49d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147124 Malicious code in registry-eris-grunt-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7589992e4db8381ae4a8bb741b6a5cc07e702fcf848a2966e18024222885cf17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140834 Malicious code in cluster-nodemon-hexo-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb987aa70456a15020ae5bec6d92271c204109174d673318920306584bb123b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113337

Malicious code in gacrux-oauth-yonder-neptune npm...

EUVD-2025-124635

Malicious code in nashira-venus-magellan-umbra npm...

CVE-2025-42886

Due to a Reflected Cross-Site Scripting XSS vulnerability in SAP Business Connector, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated victim accesses this link, the injected input is processed during web page generation, resulting in...

CVE-2025-56385

A SQL injection vulnerability exists in the login functionality of WellSky Harmony version 4.1.0.2.83 within the 'xmHarmony.asp' endpoint. User-supplied input to the 'TXTUSERID' parameter is not properly sanitized before being incorporated into a SQL query. Successful authentication may lead to...

MAL-2025-135356 Malicious code in mahesa-dodol24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5fca564bff1edc3aa6214ef64205f90ef1c5b0df87d774d864c137ef11aa45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131782 Malicious code in zaki-sego1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c94a603c43ebedacafd38934a458cff98e64791f7994b849df63b4db865159b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...