MAL-2025-94934 Malicious code in immense_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a986c376900c6b808d6d3dc576eb6176e334c868a4ab8cb2c51be7799259d24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-oblok5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483348175ca7298c6515178648b94d5667ddd65b4de99df04f4e04dddda9d48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-rawon69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c41afd72f923058d7a6fe84a63acbac279d0b424850f9f53afbbacc61e61af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85004 Malicious code in eko-ruwet3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 266ecfac701af4b3b4c87d9c21a6db2e2f530145b4fd3c2f66e27bccb34c9bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75504 Malicious code in siska-sate31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413fd26dff142d8144bac381008c637a825cb7770dbfc61e322374d43b6f2219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appropriate-brown-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b154cfffe95dc6b5e63369316d70e759facc82addcf4111b66a2905826cf33d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-bakso98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409db879ef147fa342bf30fd6bb53fa182143ecbeaf9f04d827aebdb6986fbe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63508 Malicious code in inevitable_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106d8981aae995b080c3f1f98d168e495af1db22982f807333fbe47eb1179f44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39350c67d96741cd700dccfaa46c51f951f00a5db169b58c8bffd13fd0c0c39d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-gorengan70-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8daff3b2d2f6641a33e4dded724d52c8e5bdd39c117c99e9d15d21512023b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-62363 yt-grabber-tui allows arbitrary code execution via configurable yt-dlp path

yt-grabber-tui is a terminal user interface application for downloading videos. In versions before 1.0-rc, the application allows users to configure the path to the yt-dlp executable via the pathtoytdlp configuration setting. An attacker with write access to the configuration file or the filesyst...

CVE-2025-59957

An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't...

EUVD-2017-17100

Malware in sbrugna...

EUVD-2021-18546

Malware in sbrugna...

EUVD-2023-49960

Malicious code in bioql PyPI...

DELL SupportAssist for Business PCs Elevation of Privilege Vulnerability

DELL SupportAssist for Business PCs is Dell's PC management solution for enterprise users, helping companies improve IT management efficiency and reduce O&M costs through AI-driven automated support, remote deployment and centralized control capabilities. An elevation of privilege vulnerability...

CVE-2024-7402

Netskope has identified a potential gap in its agent Netskope Client in which a malicious insider can potentially tamper the Netskope Client configuration by performing MITM Man-in-the-Middle activity on the Netskope Client communication channel. A successful exploitation would require...

CVE-2024-7402 Netskope Client Configuration Tampering with Local MITM

Netskope has identified a potential gap in its agent Netskope Client in which a malicious insider can potentially tamper the Netskope Client configuration by performing MITM Man-in-the-Middle activity on the Netskope Client communication channel. A successful exploitation would require...

CVE-2024-7402

CVE-2024-7402 concerns Netskope Client where a malicious insider with administrative privileges can tamper the client configuration via a local MITM on the client-channel. Impact per available data includes temporary or permanent configuration changes and possible removal of the agent, with CVSS ...

PT-2025-33116 · Netskope · Netskope Client

Name of the Vulnerable Software and Affected Versions: Netskope Client affected versions not specified Description: A malicious insider with administrative privileges can potentially tamper with the Netskope Client configuration by performing a Man-in-the-Middle MITM attack on the Netskope Client...