MAL-2025-67401 Malicious code in confident-apricot-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a406c814cd70e35f15027db6dcf1ac8134a715d24a238515bb508e8568d6d6dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55248

Malicious code in confident-apricot-goat npm...

EUVD-2025-55675

Malicious code in bitter-amaranth-goat npm...

Malicious code in quiet-silver-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e857e75436012cd93ae040b6b7d28b0519a8635530c9d5578b7be6cd23ea2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55981

Malicious code in advanced-aqua-goat npm...

EUVD-2025-53872

Malicious code in ill-magenta-goat npm...

Malicious code in bitter-amaranth-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3475c1055d288b9120627a66324867afb18bcc2e5006888133c2ae625e842c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53463

Malicious code in live-bronze-goat npm...

MAL-2025-68777 Malicious code in ill-magenta-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb9ce6f55d1e2a301e4739d0e379e22608ab21ae0772ddd96b198072ec05c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53720

Malicious code in integral-peach-goat npm...

MAL-2025-70423 Malicious code in round-indigo-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fe5ae50abbfb1e3aa57661be87f140e791b39e674d918527f8008225a5b038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-57224

Malicious code in sparklinggoatz3n npm...

Malicious code in yearning_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06792b6d3c3015e0786739fcbcf5dde586ddeaec4dc51c04fadc64e7bf6b10b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50293

Malicious code in enthusiasticgoatz3n npm...

EUVD-2025-46330

Malicious code in moleculargoatz3n npm...

EUVD-2014-6656

Malware in sbrugna...

FBI Seeks Public Help to Identify Chinese Hackers Behind Global Cyber Intrusions

The U.S. Federal Bureau of Investigation FBI has sought assistance from the public in connection with an investigation involving the breach of edge devices and computer networks belonging to companies and government entities. "An Advanced Persistent Threat group allegedly created and deployed...

Researchers Warn of Cyber Weapons Used by Lazarus Group's Andariel Cluster

The North Korean threat actor known as Andariel has been observed employing an arsenal of malicious tools in its cyber assaults against corporations and organizations in the southern counterpart. "One characteristic of the attacks identified in 2023 is that there are numerous malware strains...

PT-2022-2444

Name of the Vulnerable Software and Affected Versions Sophos Firewall versions prior to v18.5 MR3 18.5.3 Sophos XG Firewall version 17.0.10 MR-10 Description An authentication bypass issue exists in the User Portal and Webadmin components of Sophos Firewall, potentially allowing a remote attacker...

dairygoatworld.com Cross Site Scripting vulnerability OBB-2282552

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...