MAL-2025-60898 Malicious code in multiple_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f2bd64b9b2d27d7d6d49d94cbb3d1f069974f54d14fc62068ea3fb633ab903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59693 Malicious code in yummy_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f74ea3b296040be2b0244c0ac6a43bfce38125cf22819043cfba7c9f46983b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56428 Malicious code in galih-sambel58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f582e6375efc4ccd3189ec8fb08dd9a7d43eafab6e2e81e431322e832686383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55615 Malicious code in citra-bakso46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507792b4345008a827af23e4f20b7273d315a1202ae1dd027905724e8d0d033a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-59968 Junos Space Security Director: Insufficient authorization for sensitive resources in web interface

A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated network-based attacker to read or modify metadata via the web interface. Tampering with this metadata can result in managed SRX Series devices permitting network traffic that...

PT-2024-25212 · Digital Guardian · Digital Guardian Windows Agents

Name of the Vulnerable Software and Affected Versions: Digital Guardian Windows Agents versions prior to 8.2.0 Description: A security bypass issue exists in the Removable Media Encryption RME component, allowing users to circumvent encryption controls by modifying metadata on USB devices, thereb...

GHSA-392C-VJFV-H7WR Duplicate Advisory: Apache Superset - Elevation of Privilege

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f678-j579-4xf5. This link is maintained to preserve external references. Original Description Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2. Using th...