MAL-2025-79979 Malicious code in maya-ongol-ongol84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4b471520600424d21a33e036a406e9b06f753f20f8f86b072a26b8d28794754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77448 Malicious code in criminal_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdac91d9e7e604ef8d4a23ed4e0853852042bf6d78746c4381e1ef562278be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80536 Malicious code in only_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d033389e437a915e866ebf2297e2cbc9da1d86a5d65a71ef11091e0519049992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76711 Malicious code in ade-lumpur59-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea8f2d526cfb499576baa7f93363a08efc408504d223a14996f4c200d5ea269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70613 Malicious code in sick-yellow-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc33917aaa28ae9034322a9f94e68c8b5fa17ba84578b0099d28982c8dcfac63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69745 Malicious code in ordinary-scarlet-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df86d700a6f4c873756ba0989618d9bbb3ba5585c9466d7b1be72af40054244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51987 Malicious code in gita-lepet92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08e560c46126ef13fe6e0669a90914b3c2bb81a80f657be93f14edf48344207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-191756 Malicious code in hexdecimal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c76fe38c65db757a8e7f52d36acea2c85ea223e1342e513c0eb2115b19da7bcb Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

CVE-2017-20203

NetSarang products including Xmanager Enterprise 5.0 (Build 1232), Xmanager 5.0 (Build 1045), Xshell 5.0 (Build 1322), Xftp 5.0 (Build 1218), and Xlpd 5.0 (Build 1220) are affected by a supply‑chain backdoor delivered via a malicious nssock2.dll. The DLL implements a multi‑stage, DNS‑based backdo...

EUVD-2025-32881

NetSarang Xmanager Enterprise 5.0 Build 1232, Xmanager 5.0 Build 1045, Xshell 5.0 Build 1322, Xftp 5.0 Build 1218, and Xlpd 5.0 Build 1220 contain a malicious nssock2.dll that implements a multi-stage, DNS-based backdoor. The dormant library contacts a C2 DNS server via a specially crafted TXT...

EUVD-2021-19320

Malware in sbrugna...

EUVD-2020-25244

Malware in sbrugna...

EUVD-2017-15822

Malware in sbrugna...

EUVD-2018-12066

Malware in sbrugna...

EUVD-2019-13860

Malware in sbrugna...

EUVD-2021-16408

Malware in sbrugna...

EUVD-2007-3987

Malware in sbrugna...

EUVD-2008-2144

Malware in sbrugna...

EUVD-2023-40843

Malicious code in bioql PyPI...

Sony: DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)

A DLL side-loading vulnerability was discovered in Sony Music Center for PC Ver. 2.7.2. The application insecurely searched for a missing DLL file in the system PATH environment, allowing an attacker with access to the victim's local machine to achieve arbitrary code execution by placing a...