CVE-2022-35884

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted HTTP request can lead to memory corruption, information disclosure and denial of service. An attacke...

EUVD-2025-175896

Malicious code in transpile-new-cache-iota-quick npm...

EUVD-2025-176592

Malicious code in root-user-await-validate-iota npm...

EUVD-2025-178698

Malicious code in global-polaris-spica-iota npm...

EUVD-2025-177254

Malicious code in perseus-metalsmith-acamar-iota npm...

EUVD-2025-177289

Malicious code in pegasus-deneb-iota-mira npm...

EUVD-2025-178350

Malicious code in iota-analyze-transpile-iota-abstract npm...

EUVD-2025-178338

Malicious code in iota-scripts-phoebe-geckodriver npm...

EUVD-2025-178334

Malicious code in iota-virtualize-alert-mu-cache npm...

EUVD-2025-180344

Malicious code in arcturus-iota-auth-blaze npm...

EUVD-2025-180381

Malicious code in apollo-sirius-upgrade-iota npm...

EUVD-2025-178262

Malicious code in joviology-standard-iota-outercore npm...

EUVD-2025-179812

Malicious code in ceres-augmentedreality-iota-transport npm...

EUVD-2025-178344

Malicious code in iota-hugo-mongoose-hapi npm...

EUVD-2025-179223

Malicious code in dysonswarm-gulp-dendrochronology-iota npm...

EUVD-2025-175450

Malicious code in yaml-iota-jasmine-norma npm...

EUVD-2025-177248

Malicious code in perseus-tectonophysics-iota-xenobiology npm...

Malicious code in arcturus-iota-auth-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344a134db153287fc48bcaa7911fb098e3e8419e1acff1237db92b1b6b1c68f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176938

Malicious code in public-final-iota-upsilon-array npm...

EUVD-2025-179746

Malicious code in chi-iota-decompress-sed-emulate npm...