CVE-2022-35884

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted HTTP request can lead to memory corruption, information disclosure and denial of service. An attacke...

EUVD-2025-178824

Malicious code in function-iota-sanitize-view-old npm...

EUVD-2025-176941

Malicious code in public-bundle-class-iota-thread npm...

EUVD-2025-179527

Malicious code in cosmology-levels-terser-iota npm...

EUVD-2025-179336

Malicious code in deneb-iota-xenos-celeste npm...

EUVD-2025-178350

Malicious code in iota-analyze-transpile-iota-abstract npm...

EUVD-2025-176938

Malicious code in public-final-iota-upsilon-array npm...

EUVD-2025-179161

Malicious code in emulate-earth-lambda-iota-mock npm...

EUVD-2025-175450

Malicious code in yaml-iota-jasmine-norma npm...

EUVD-2025-178334

Malicious code in iota-virtualize-alert-mu-cache npm...

EUVD-2025-178347

Malicious code in iota-centaurus-blackhole-cosmicray npm...

EUVD-2025-175837

Malicious code in umbra-iota-graphql-callback npm...

Malicious code in eris-slidev-iota-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df597c8562db9900df55e7a3e8d03179009373f184183e35c90f96a6edfe0739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176854

Malicious code in quark-iota-paleoclimatology-enif npm...

EUVD-2025-180231

Malicious code in aurora-transform-protoplanetarydisk-iota npm...

Malicious code in antares-iota-mysql-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b745a215730f800ab23e41a575eb14af8482a22bb5b1a6db13350db681a93e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176100

Malicious code in superposition-quasar-iota-mysql npm...

EUVD-2025-179065

Malicious code in eris-perseus-subscription-iota npm...

Malicious code in cressida-cache-iota-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdc68100f25ab316f603e943cc9672495c31169a3534af578cd94b80cb0b020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-iota-auth-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344a134db153287fc48bcaa7911fb098e3e8419e1acff1237db92b1b6b1c68f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...