MAL-2025-56752 Malicious code in hilarious_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69258472527a78134ff0796bc24dd89854f5aa8d9568e47bc9e6ff24fc6717e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57761 Malicious code in nana-klanting39-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1665bc59317206fd59c7faf31907dda992b41b5152d193d9942a32016735725c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58657 Malicious code in silly_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808b1b70f4cbf46483708bc2b9c0fb09b52c71b2a0ec0b108cee67648a1054d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54869 Malicious code in sinta-lupis21-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 891747892324e53742c9886fbf25cb6a0df07f130f329ae535e19286d2387e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-lengko7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d392e8f585c2623f1319c91b9debf53097aad7bc6e652419231eef71cdc68bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54005 Malicious code in okta-tempe9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04435af55d22d881d10da1d052ae3bdf365cd5e1dac299f370fca1af84f9066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52924 Malicious code in hendra-toge41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5722d7cfa92fff27b3649a7ace46abdf9cebcab810472dbaa1cc3b1cc6eb1fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53036 Malicious code in joko-takokak71-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5242f4bad2527fcdd593e09e1516143c385b4b8f7b5ac369f9a4f4a1093800de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-sate23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98848f12921cbbc7c3f57cec73f1c629f622e498fd26a0a96cbd666d4c893c6e The package eka-sate23-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

Malicious code in candra-kentang61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09065b7db49b2f4f6008456fac5968d88efa8e9ac9a29da5ac6f9ed077a2f43b The package candra-kentang61-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

CVE-2025-54863

Radiometrics VizAir is vulnerable to exposure of the system's REST API key through a publicly accessible configuration file. This allows attackers to remotely alter weather data and configurations, automate attacks against multiple instances, and extract sensitive meteorological data, which could...

CVE-2025-59171

Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions...

CVE-2025-62630

Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions...

CVE-2025-62630: Improper Limitation of a Pathname to a Restricted Directory

Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions...

CVE-2025-64109

Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta allowed an attacker to achieve remote code execution through the MCP Model Context Protocol server mechanism by uploading a malicious MCP configuration in .cursor/mcp.json file in ...

CVE-2025-64109 Cursor CLI Beta: Command Injection via Untrusted MCP Configuration

Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta allowed an attacker to achieve remote code execution through the MCP Model Context Protocol server mechanism by uploading a malicious MCP configuration in .cursor/mcp.json file in ...

CVE-2025-64109 Cursor CLI Beta: Command Injection via Untrusted MCP Configuration

Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta allowed an attacker to achieve remote code execution through the MCP Model Context Protocol server mechanism by uploading a malicious MCP configuration in .cursor/mcp.json file in ...

CVE-2025-64318

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue affects Mulesoft Anypoint Code Builder: before 1.12.1...

CVE-2025-54863

Radiometrics VizAir is vulnerable to exposure of the system's REST API key through a publicly accessible configuration file. This allows attackers to remotely alter weather data and configurations, automate attacks against multiple instances, and extract sensitive meteorological data, which could...

CVE-2025-54863 Insufficiently Protected Credentials in Radiometrics VizAir

Radiometrics VizAir is vulnerable to exposure of the system's REST API key through a publicly accessible configuration file. This allows attackers to remotely alter weather data and configurations, automate attacks against multiple instances, and extract sensitive meteorological data, which could...