EUVD-2026-22679

Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services COS allows an attacker to modify the server's configuration file, potentially leading to mass data exfiltration, malicious traffic interception, or disruption of testing services...

CVE-2026-5756

Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services COS allows an attacker to modify the server's configuration file, potentially leading to mass data exfiltration, malicious traffic interception, or disruption of testing services...

PT-2026-32896

Name of the Vulnerable Software and Affected Versions DRC Central Office Services COS affected versions not specified Description An unauthenticated configuration file modification issue allows an attacker to modify the server configuration file. This could lead to mass data exfiltration, malicio...

CVE-2025-63739

Xinhu Rainrock RockOA 2.7.0 is affected by CVE-2025-63739 due to a flaw in phpinisaveAction() in webmain/system/cogini/coginiAction.php. An authenticated user can use the a parameter on index.php to modify PHP configuration files. The vulnerability affects the cited version; Red Hat and other sou...

MAL-2025-185859 Malicious code in blitz-materialize-link-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd6558b44eec2954b20bb99ebb1a7e8e455149631179d6949c5569bd11e1822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuh-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9136809fa12322dc7854ba2f53dcbb85099ea41383a04a6378fef71daeb60c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164340 Malicious code in poli-aki-alai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3767b172972d4d77671bc776ec2ab0a0be3717c66ec308d04eec3a06c8c4cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_mackerel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f427e8d127b6249a7bab6a75daee520d707af415d578b245ea2fb4f5a932c793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-saguer57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6997de9710f773943d26b60ff0699c1e1aabb95d45db92e4567adc24bfeede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-martabak50-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1ddb60b3683ad8e1f76426aa3838ef7f752ecfe505b4c899b80c86b220499f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94501 Malicious code in fierce_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4307b8a0615c6c1e1bb8869685e86e0a0b4204cef7d00f3be65f194d9d15229d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89679 Malicious code in putri-kue79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4355c4d51d65b4a533c3df71eae7f6817b0d77c631c23236a6e27b0347ca4c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81389 Malicious code in siska-mangut18-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f040992c997ca2c9fb6440799e3cbd607d0af9a479d3ecfcf1b21c0f38fdfdac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77295 Malicious code in cindy-martabak11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e795fd852ee5c86882ac096771bbe638b6fb1ff1db54435c4132ccf0339ad12f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-naget51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d19851ce70073418146e2c2fc7eefab7858426445b1474e339c27e3f1506994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-botok99-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2121b9e295bd079d50e8756feb3e513399947bb959d213cd7f69fff7576ebb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56752 Malicious code in hilarious_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69258472527a78134ff0796bc24dd89854f5aa8d9568e47bc9e6ff24fc6717e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-sate23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98848f12921cbbc7c3f57cec73f1c629f622e498fd26a0a96cbd666d4c893c6e The package eka-sate23-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

EUVD-2020-10112

Malware in sbrugna...

EUVD-2011-4270

Malware in sbrugna...