PT-2025-50239

Name of the Vulnerable Software and Affected Versions COMMAX Smart Home System affected versions not specified Description An unauthenticated attacker can alter configurations and disrupt service. This is achieved by sending a crafted request to the setconf API endpoint. An attacker can initiate ...

CVE-2025-54848

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this...

CVE-2025-54848

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this...

Malicious code in warp-asthenosphere-ganymede-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a92ebd310cc475e2b9ba6eae8284cedf4b60c8bbc57a74d40d2b6dfbaceb30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-thuban-commitlint-config-angular-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a6549fd8e5b7d2d9bdd5f25574202ea00d3f54f001e0e57c00fca175f5c116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cat-minify-cold-reject-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c65a38066677839d90818b4977e99e296362c59be875c64b11287406021b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189373 Malicious code in schema-bunyan-magnetar-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ce6f081cee557707eacd7810a9814c41e0e6b0fa80e601cf9858edcbc9384a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189919 Malicious code in thread-daemon-try-omega-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e433f4a84e6efa7b11638b10854c927218008bde39976e0df1922164229fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186903 Malicious code in exoplanet-genomics-thermosphere-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3eb6aa62f0ef2efdeb2e5a6edc6dd0fc792ad8dd18cec6011451d9b9b53b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-gahuvfadduuvufafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2b22aeb5684a5d99a3c3dab9406d35cbbb982677d150fe6b0201379f6e3dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lamokoinabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b711ce1333f22f4e7833536eb978d9cd2bee00bf27f2585366aa4f84792c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ykhjyafizgankool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08a279b1373a8de20b9a668e9eb13a9f169599f2cbd3e07b7f1003460b697f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kuu-bofaufi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2618f4c3c9a677d76dd98d8f4e23fa2567422fe26da6fa5b54506e6a3a9655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184560 Malicious code in oc-gua-vsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6e6123a645caf59e7fface4348da44fbaa41fed9627d4bdeb283124d759fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182611 Malicious code in imugiay-ajvog-dacak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60eb697799146d089002fb84f94854468a3626bc557b47afa9961f06cf53dc8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182934 Malicious code in itale-adci-yafing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2da81b4e5dbb224e6016e2d76c4109d8aba0acb07d0a5fe66d5387e0c8afea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182959 Malicious code in itale-adcii-gnuygurygjhbkomtollujlnrti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44176e1a830693b92ec04164525a18f61e8ce1b1c3ba4945cb604f5409f16f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-zefot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809e4614a962dee95695386a4ddbb55c0842a2a2e4529ce0aa6b4877509a94f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manuidais-btayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 010731b92fe2357c59a735fdf905106d294b81aefb4579acad49cee53481fb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0568b6bad1e90dbba6e0972cddc6e9828cc47fd5928d7637d2f8db9c321d6be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...