Malicious code in rifqi-kupat13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9507743fe6d94ae5f9a90c7dfd113c5ae1d842f125f89cfdb4dc95f5db3ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-jengkol6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4cf132791de236969a1e23153cf90f1079dc7085c6f1c88c91275d981642847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Important: Red Hat Bug Fix Advisory: .NET 10.0 bug fix and enhancement update

An update for .NET 10.0 is now available for Red Hat Enterprise Linux 10. Please updateBug Fixes and Enhancements: Update .NET 10 to RC 1 rhel-10.1.z JIRA:RHEL-114571 Update .NET 10 to RC 2 rhel-10.1.z JIRA:RHEL-121558 dotnet10.0: .NET Denial of Service Vulnerability rhel-10.1.z JIRA:RHEL-120611...

Vulnerabilities fixed in Microsoft Visual Studio

Microsoft has fixed vulnerabilities in Visual Studio and Code Copilot for Visual Studio. A malicious party could exploit the vulnerabilities to bypass security measures and execute arbitrary code in the victim's context. For successful exploitation, the malicious party must trick the victim into...

Vulnerability fixed in Microsoft SQL Server

Microsoft has fixed a vulnerability in SQL Server. An authenticated malicious party can exploit the vulnerability to use specially prepared SQL statements SQL Injection to grant themselves elevated privileges and thus gain access to sensitive information that the malicious party is not initially...

Vulnerabilities fixed in Microsoft Dynamics

Microsoft fixed vulnerabilities in Dynamics The vulnerabilities are in Dynamics 365 On Premise and Dynamics Field Service and allow a malicious person to access sensitive data, or impersonate another user. Microsoft has made updates available that fix the described vulnerabilities. We encourage y...

CVE-2025-60727

creationtimestamp| type| source ---|---|--- 2025-11-11 17:30:42+00:00| seen| https://www.thezdi.com/blog/2025/11/11/the-november-2025-security-update-review 2025-11-11 17:31:27+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0359 2025-11-12 08:07:30+00:00| seen|...

CVE-2025-12943

CVE-2025-12943 involves NETGEAR RAX30 and RAXE300 devices, where improper certificate validation in the firmware update logic lets an attacker who can intercept and modify traffic potentially execute arbitrary commands on the device. Affected products: NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400...

Malicious code in slow_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee56ac729d192f8d5b74bff4fa6e7c7510a33a207fa8c14d4fcaefe9319946f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112851 Malicious code in bayu-toge80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 833bc39c1e912991435f609aec660eef5e130e09462b5f90b714f39e5d916de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wicked_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad9d9defeef6935b20518bf6e2ef05cd8527734f78e2d17c1fc7be1c29c8abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101139 Malicious code in cuddly_roadrunner_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d48e45c5d73ef11388a4922089fde6e3eb457b1ddec4e28aabdcd2072966caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108622 Malicious code in sheer_stingray_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc61bcd567e345d59f6b80dc5c07a6169f405f9e4a863071a4a9f6ef78855a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99889 Malicious code in bella-donat86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ee719365468a412ee75c94219dc70287cad31ecd572ae28421988156d56bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93269 Malicious code in arrogant_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fceab05bb9d4b993d603b74e45af407d25ce25a2849453da4a8178a62b74479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94581 Malicious code in forthcoming_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d198cc7c592e34e410725aef4df2ff58c3d07769c6c12e61366a4204cc9a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95791 Malicious code in original_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1d3cbaf1d0933863c62459ff8b2d144369b91a1c7d82d65f5e7374c06cb793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86651 Malicious code in indah-kue95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e331f444978dd6c717af6a135a6980b62220ae01807c8807445efcd6f326afad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88077 Malicious code in lutfi-sambel36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00855837dda4b3a9ede9f260aa28a011a1092f28dcc1745539c58c7b5d161a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11999

The Add Multiple Marker plugin for WordPress is vulnerable to unauthorized modification of data to due to a missing capability check on the addmultiplemarkerresetmap and ammsavemapapi functions in all versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to upda...