MAL-2025-36909 Malicious code in tide-uranium-uep495-project (npm)

The package tide-uranium-uep495-project was found to contain malicious code...

MAL-2025-36906 Malicious code in tide-saturn-fzi583-project (npm)

The package tide-saturn-fzi583-project was found to contain malicious code...

MAL-2025-36910 Malicious code in tide-wbbio-36nk6-raven-project (npm)

The package tide-wbbio-36nk6-raven-project was found to contain malicious code...

Malicious code in tide-dove-ycs026-project (npm)

The package tide-dove-ycs026-project was found to contain malicious code...

MAL-2025-36902 Malicious code in tide-paradise-xzv241-project (npm)

The package tide-paradise-xzv241-project was found to contain malicious code...

MAL-2025-36899 Malicious code in tide-gorilla-dyv651-project (npm)

The package tide-gorilla-dyv651-project was found to contain malicious code...

MAL-2025-31993 Malicious code in reef-tide-syc865-project (npm)

The package reef-tide-syc865-project was found to contain malicious code...

MAL-2025-40476 Malicious code in yeti-tide-whe735-project (npm)

The package yeti-tide-whe735-project was found to contain malicious code...

PT-2025-43668

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 146 Firefox ESR versions prior to 115.31 Firefox ESR versions prior to 140.6 Description A sandbox escape exists because of incorrect boundary conditions within the Graphics: CanvasWebGL component. Real-world attacks...

Beware the Rising Tide: Financial Services Is Awash in Attacks

...

Packet Tide ExpressionEngine Cross-Site Scripting Vulnerability

Packet Tide ExpressionEngine is an open source content management system CMS from Packet Tide, Inc. A cross-site scripting vulnerability exists in Packet Tide ExpressionEngine versions prior to 7.4.11, which stems from a cross-site scripting vulnerability contained in files such as Channels.php,...

Packet Tide ExpressionEngine 安全漏洞

Packet Tide ExpressionEngine is an open source content management system CMS from Packet Tide, Inc. in the United States. A security vulnerability exists in Packet Tide ExpressionEngine versions prior to 7.2.6 that stems from the presence of remote code execution...

Malicious Package

Overview @tide-web-apps/global-environments is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerabl...

Malicious code in @tide-web-apps/global-environments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e076dfaaa81e703e22d7768acdea28c2ebed115cd9ef3030d468509d8104de4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tide-web-apps/bert2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99d5f53797185072dc53ede74701d23610dd6e6cf3724c3e2e813142e0008738 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-642 Malicious code in @tide-web-apps/bert2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99d5f53797185072dc53ede74701d23610dd6e6cf3724c3e2e813142e0008738 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MDR Plus Threat Intel: 414 New Detections in 251 Days (You’re Welcome)

Last summer, Rapid7 acquired IntSights and its advanced external threat intelligence solution now Threat Command by Rapid7. Threat Command monitors hundreds of thousands of sources across the clear, deep, and dark web, identifying malicious actors and notifying customers of potential attacks...

Async-h1 request smuggling possible with long unread bodies

Impact This vulnerability affects any webserver that uses async-h1 behind a reverse proxy, including all such Tide applications. If the server does not read the body of a request which is longer than some buffer length, async-h1 will attempt to read a subsequent request from the body content...

GHSA-4VR9-8CJF-VF9C Async-h1 request smuggling possible with long unread bodies

Impact This vulnerability affects any webserver that uses async-h1 behind a reverse proxy, including all such Tide applications. If the server does not read the body of a request which is longer than some buffer length, async-h1 will attempt to read a subsequent request from the body content...

PACKET TIDE ExpressionEngine 输入验证错误漏洞

Packet Tide ExpressionEngine is an open source content management system CMS from Packet Tide Packet Tide. An input validation error vulnerability exists in PACKET TIDE Expression Engine versions prior to 6.0.3, which stems from a lack of validation of the input value of input-getfile in the...