Malicious code in stuck_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f093579c65795f44ded33aa687420f7481e2f33f17b8edec50234a87e54020b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58360 Malicious code in regular_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6163f10b8201d789cc7f3059797607f0e11982266e3eaf01f70ec6720e95a8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58626 Malicious code in scattered_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801b894ed284a9b67beeab3bda94469a419e20987c6a132ba0885aa4b469dd49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56535 Malicious code in gita-ronde83-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01304424880bcb7a422cfe9ad5f758bb58bd1c8348e95d2514b762887516c6c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55721 Malicious code in controversial_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fa2467253759555da784dc18ad234c3791f4f18534d1e4858f3698eae11a1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-pecel98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae218d13ca900da3ef80ea9b1af73020942e48b5215344250b3e33c28af65911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-brongkos79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d27bb95d23616f3499eecc4e132f6339442d082af1c7a0fb17fb8e267b8008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-ongol-ongol85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b93fa57b2c9c9c84bc611a25026a48d5be4747fdfa729f4c753c552a1ecf04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-tahutek23-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97b95cd1c26b6f862554cee708de04997a2001cb48117ef6bc4fdb97821a020 The package budi-tahutek23-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in utomo-buburayam5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba44464d6c8c99125a1a99254bcab6c0ab7abb718251dee868ddd8adbdeec5b The package utomo-buburayam5-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50995 Malicious code in bayu-rojak1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ff4250b003babbee8f88462f24f61d0f214de96e068c004812a7cbbc691b51 The package bayu-rojak1-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

CVE-2025-61956

Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control ATC and pilots...

CVE-2025-61956

Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control ATC and pilots...

CVE-2025-61956

Radiometrics VizAir is affected by a lack of authentication for critical functions (admin panel and REST API). This could allow an unauthenticated attacker to modify configurations and weather data, potentially manipulating active runway settings, misleading air traffic control and pilots, and ca...

PT-2025-45018

Name of the Vulnerable Software and Affected Versions Radiometrics VizAir affected versions not specified Description Radiometrics VizAir lacks authentication mechanisms for critical functions, including admin access and API requests. This allows attackers to modify configurations without...

CVE-2025-4952

Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration...

CVE-2025-4952 Denial-of-service vulnerability in ESET security products for Windows

Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration...

PT-2025-44622

Name of the Vulnerable Software and Affected Versions ESET security products for Windows affected versions not specified Description Tampering with registry entries could prevent ESET security products from starting correctly upon the next system startup or result in unauthorized changes to the...

CVE-2025-4952: Incorrect Permission Assignment for Critical Resource

Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration...

PT-2025-44153

Name of the Vulnerable Software and Affected Versions TropOS 4th Gen affected versions not specified Description An authenticated user with the ability to run user level shell commands can enable access via secure shell SSH to an unrestricted root shell by making minor configuration changes to th...