EUVD-2025-120158

Malicious code in yakutsk-kastra-webpack-release-it npm...

EUVD-2025-122683

Malicious code in release-it-xo-jekyll-relay npm...

EUVD-2025-115219

Malicious code in comet-proxima-csv-release-it npm...

MAL-2025-148501 Malicious code in telesto-release-it-google-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ccdd5032ea5072b6c78227164fcfdd6caeffefe98b43a5d8156d92454dd74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147226 Malicious code in release-it-mini-css-extract-plugin-prettier-plugin-markdown-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef36d47d6ae8f741f94ac19f984fd1f6347dbc887b13c2ce02e86997baa8cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112383

Malicious code in iota-json-release-it-chai npm...

EUVD-2025-114914

Malicious code in cosmiconfig-release-it-betelgeuse-commitlint npm...

MAL-2025-145778 Malicious code in octans-release-it-carina-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912b65c20fbd5e2fe8d1a71298ca00870d815cd43e9e5cb9994d32666f2c406d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122695

Malicious code in release-it-nightwatch-jekyll-yildun npm...

EUVD-2025-112617

Malicious code in hyperion-release-it-halley-radiant npm...

EUVD-2025-112550

Malicious code in indus-elara-selenium-release-it npm...

EUVD-2025-122705

Malicious code in release-it-blitz-colors-protractor npm...

EUVD-2025-112509

Malicious code in ini-release-it-pyxis-auriga npm...

EUVD-2025-112554

Malicious code in indus-bootes-release-it-mui npm...

MAL-2025-141777 Malicious code in dotenv-safe-semantic-ui-corvus-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542b8da9f5521fb24d5e53f53645f4fb810e158f42eab400a7d5badcd6f44895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

TEC-IT TBarCode 安全漏洞

TEC-IT TBarCode is a series of barcode generation software from TEC-IT Austria. A security vulnerability exists in TEC-IT TBarCode version 11.15, which stems from a problem with the license handling of the TBarCode11.ocx ActiveX/OCX control, which could lead to remote file creation...

EcoStruxure-IT-Data-Center-exploit

EcoStruxure IT Data Center Expert Exploit Authenticated RCE...

CVE-2025-63601

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands...

From Tabletop to Turnkey: Building Cyber Resilience in Financial Services

Introduction Financial institutions are facing a new reality: cyber-resilience has passed from being a best practice to an operational necessity to a prescriptive regulatory requirement. Crisis management or Tabletop exercises, for a long time relatively rare in the context of cybersecurity, have...

Malicious code in mojio-client-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fea28b1c502ade1afb436a22ffc2bd83e1c413dd85b274370f805ec0760be91 The package mojio-client-lite was found to contain malicious code. Source: ghsa-malware...