Malicious code in elf-stats-cosy-stockpile-694 (npm)

Source: amazon-inspector 862bf1e70a99afc56c9510ca0174365ec2f6c4d2409a8435e4c6d2172530c013 The package elf-stats-cosy-stockpile-694 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-cosy-pantry-344 (npm)

Source: amazon-inspector 3ef8044f8770730d231d02beff3024ca24051a1c531666c9b79eda968846d8e5 The package elf-stats-cosy-pantry-344 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-cosy-wishlist-811 (npm)

Source: amazon-inspector f79155a09dd080cfd27cfeae74592b59183dc70ee62fb4865149bedccb5a3a9b The package elf-stats-cosy-wishlist-811 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-cosy-sled-455 (npm)

Source: amazon-inspector 0a2457017a1c0d3e15ea8a4d2dcfe0034a2b5c29777b1ef9a6267ac6f19180f3 The package elf-stats-cosy-sled-455 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-cosy-cocoa-331 (npm)

Source: amazon-inspector 237b2bbc801ab402a2129c80e74c350c4f084911f128b1bf78bfaf21818cdefb The package elf-stats-cosy-cocoa-331 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-cosy-toy-308 (npm)

Source: amazon-inspector aca3af23bbfec4f6a8b388056bdca1e75940f84912fc3413aa6f6ef991997df5 The package elf-stats-cosy-toy-308 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-cosy-sled-550 (npm)

Source: amazon-inspector 1d003b03c0bb71b9501930d50f6b45cd0c91c9b89080bea5d69f04f0b561f3f8 The package elf-stats-cosy-sled-550 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-cosy-chimney-268 (npm)

Source: amazon-inspector e24d73cecabaa533a5d7f62f37863ec27645d5d6064e29f65b1efa0c3f9050c0 The package elf-stats-cosy-chimney-268 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-cosy-sparkler-518 (npm)

Source: amazon-inspector 184c7b46e4d3b1b02d55b40936f0b5186828a6e91fb4c06e88608e79424c913f The package elf-stats-cosy-sparkler-518 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-cosy-drum-671 (npm)

--- Credit: OpenSSF source...

MAL-2026-7259 Malicious code in elf-stats-cosy-drum-671 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in elf-stats-cosy-drum-671 (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-25819

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 allows unauthenticated attackers to cause a Denial of Service by using a specially crafted HTTP request that leads to a reboot of the device, provided they hav...

CVE-2026-25818

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have weak entropy for authentication cookies, allowing an attacker with a stolen session cookie to find the user password by brute-forcing an encryption...

CVE-2026-25823

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have a stack buffer overflow that leads to a Denial of Service, which can also be exploited to achieve Unauthenticated Remote Code Execution...

EUVD-2026-11715

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have a stack buffer overflow that leads to a Denial of Service, which can also be exploited to achieve Unauthenticated Remote Code Execution...

EUVD-2026-11713

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 allows unauthenticated attackers to cause a Denial of Service by using a specially crafted HTTP request that leads to a reboot of the device, provided they hav...

EUVD-2026-11711

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have weak entropy for authentication cookies, allowing an attacker with a stolen session cookie to find the user password by brute-forcing an encryption...

EUVD-2026-11709

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have improper neutralization of special elements used in an OS command allowing remote code execution by attackers with low privilege access on the gateway,...

CVE-2026-25823

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have a stack buffer overflow that leads to a Denial of Service, which can also be exploited to achieve Unauthenticated Remote Code Execution...