CVE-2025-15032

Dia for macOS before 1.9.0 is vulnerable to spoofing of the window title due to a missing about:blank indicator in custom-sized new windows. The root cause is the absence of a visual cue (about:blank indicator) that can mislead users about the current site. Affected product: Dia (macOS). Impact: ...

PT-2026-3271

Name of the Vulnerable Software and Affected Versions Dia versions prior to 1.9.0 Description A flaw exists in Dia that, on macOS, could allow an attacker to spoof a trusted domain in the window title of custom-sized new windows. This could mislead users about the current site due to a missing...

Dia security vulnerabilities

Dia is an AI-driven smart browser developed by Dia Company. Versions of Dia prior to 1.9.0 contained a security vulnerability. This vulnerability stemmed from the absence of the about:blank indicator in new windows with custom sizes, which could allow attackers to deceive trusted domains and...

CVE-2025-13132

A flaw was found in dia. This vulnerability allows users to be misled about the current site via a malicious site rendering a fake user interface UI without a full-screen notification...

The Browser Company of New York Dia 安全漏洞

The Browser Company of New York Dia is an AI browser from The Browser Company of New York, USA. A security vulnerability exists in The Browser Company of New York Dia prior to version 1.6, which stems from a lack of notification alerts in full-screen mode and could lead to users being misled...

EUVD-2025-137946

Malicious code in astam-ifst-dia npm...

Malicious code in dia-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d23e9ab0a91b585262833113ce9626c42e5818c0a589a89077cfabeddbedd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9792a3a451d3e3be12f7c50a24ae8c379bf440ef5704968a13c0eeb9c63c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9414a291d0219aa8f0af7821b75b3fd6b4c34fcf41dfe3e393d86d63cc309f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa771970333a616dcc0a3b6d59a32b3eb2c070ab6d414ea7c734417c4b48ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1a863d6f0638ca62efa765355bfdd7e9139bc40b7f411125cf07a0f029915f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce86d8d51739c31f3debd7050598b48e692365eef172fed550267e2d7252b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be33a2123dfe2a0e3c0b098150827e8956a7e8029dabc1c2daedcb25ba1560c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfed7e1920d5c59061de225f3ccd1a4b960306f13e01cd13cea74a46835abac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fdba0d2be064e26691b72b3dd34dc42756849707b82ffb36709cd5189002235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154337 Malicious code in dia-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90af30cec982899028cc11277fe1342d4fafa1f15c24430f193d0faaed0a5045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154325 Malicious code in dia-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51caa535d1d1a0073f281b951f0dc7797ef9163c305878120974b3919a122427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154302 Malicious code in dia-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc1122ae37ac58cf09041bbf6d124020c4b1f9d09c3e2b1ac64a0f62119194d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154334 Malicious code in dia-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbaacc430a8bb8dbc3d222378ba9fe8457df4f43b02469d756bf3eed842a66b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154333 Malicious code in dia-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7639b8ce2202283171f738acff6fcaec9cc4f2fe172199127cc13efe043800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...