Malicious code in spicy_harrier_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcee1db8d76e5478e0674858053fefd7c4722d6ed6764a2c5655f66617e32a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80475

Malicious code in spicyunicorn0xrequest npm...

EUVD-2025-84181

Malicious code in spicyflyz3n npm...

Malicious code in spicy_possum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1278bd423786dcd9088917ac2aefcaf938e73fd6a0c1fa1b550b605b2f3e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51886

Malicious code in spicy-aquamarine-guanaco npm...

Malicious code in spicy-tan-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d486ad3e838db7d57ec64cf8fb30356a50a5cfb6b12d2cdb98f90ff2721bd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51882

Malicious code in spicy-tan-boa npm...

EUVD-2025-51884

Malicious code in spicy-rose-mollusk npm...

EUVD-2025-51887

Malicious code in spicy-apricot-kite npm...

EUVD-2025-51883

Malicious code in spicy-salmon-piranha npm...

EUVD-2025-51885

Malicious code in spicy-coral-coral npm...

EUVD-2025-57220

Malicious code in spicyskinkz3n npm...

Malicious code in spicy_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbb08704e5ba04043fb3deab69ad67f40b167afd64877d16971c4159a59a3cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61334 Malicious code in spicy_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbb08704e5ba04043fb3deab69ad67f40b167afd64877d16971c4159a59a3cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-45210

Malicious code in spicybarnaclez3n npm...

Malicious code in spicy-sections (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1219a9ef68604ee2328197a68dbfe365cc32084933ca9ca0eff24d191dbb91d Any computer that has this package installed or running should be considered...

MAL-2025-1051 Malicious code in spicy-sections (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1219a9ef68604ee2328197a68dbfe365cc32084933ca9ca0eff24d191dbb91d Any computer that has this package installed or running should be considered...

Treasury Sanctions Creators of 911 S5 Proxy Botnet

The U.S. Department of the Treasury today unveiled sanctions against three Chinese nationals for allegedly operating 911 S5, an online anonymity service that for many years was the easiest and cheapest way to route ones Web traffic through malware-infected computers around the globe...

ClearPass Policy Manager Unauthenticated Remote Command Execution

!/usr/bin/env bash ClearPass Policy Manager Unauthenticated Remote Command Execution in the WebUI CVE-2020-7115 For best results use OpenSSL/libcrypto shipped with RHEL/CentOS 7.x. Questions? Contact [email protected]. if "$" -ne 4 ; then echo "Usage: basename $0 remote host remote port...

spicy-motion.com XSS vulnerability

Open Bug Bounty ID: OBB-600502 Description| Value ---|--- Affected Website:| spicy-motion.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...