10183 matches found
MAL-2025-53624 Malicious code in ocha-peyek65-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05fc4177d9458457a3b7d943dd51552879fbaee35f508eaaab4be9957066cbfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kresna-kue71-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feccaadcae43f72e29e46f06b7e73e6d6cc89712361d7bf4b316bc8e8ae6a31b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in joni-gandul75-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f502e6ad0d19d31e3af2bfc49d1447a091009e3192aa538543c302620013564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in wati-wajit50-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81f0eabc9e637c56bd5646b145e74b8c51887f8986f2ca4777a3305fb4887fd The package wati-wajit50-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
MAL-2025-50046 Malicious code in cici-kemplang36-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4220e30241abfdb86914f3a80c538d73436d766bf7a322053d67f8da9a6933e4 The package cici-kemplang36-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...
Malicious code in fauzi-toge93-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b115318608158085eb4101b189f2d25ebd0770ef5fa412dd9c77365dd046fffb The package fauzi-toge93-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
Malicious code in dewi-kembang44-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59c0069376d1195f0d35fdfd44ce33277a0602d1bd66b1eb386d5637707f39d The package dewi-kembang44-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...
MAL-2025-51632 Malicious code in eka-jamblang10-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb59b409dc52f8b4559b53bb9d91754c672f0251696e9ac949487a8dbc46dc2 The package eka-jamblang10-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
CVE-2025-12922
creationtimestamp| type| source ---|---|--- 2025-11-10 02:16:01+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5akhtlglfx2 2025-11-10 03:41:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5apc5rc2l2u...
CVE-2025-12914
creationtimestamp| type| source ---|---|--- 2025-11-09 00:37:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m55uk3ol422w 2025-11-09 00:55:17+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m55vitgmd322...
CVE-2025-12915
creationtimestamp| type| source ---|---|--- 2025-11-09 00:32:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m55ub5ba3k2w 2025-11-09 00:55:18+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m55vizwzit22 2025-11-09 01:32:02+00:00| seen|...
MAL-2025-49392 Malicious code in focusync-custom-controls (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83979de8b383c0a28ec2fea476c2842bafabcb6e5abfe06e4253a9c1ab713234 The package focusync-custom-controls was found to contain malicious code. Source: ossf-package-analysis...
MAL-2025-191929 Malicious code in wei516-enconly (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3e40931688b41ac8340ab8f27604ba32f1ea6e364df1e614343cbc4cf0df50e8 Package seems to provide an MCP server, but in fact contains attempts to make an LLM agent break safeguards. As the request is about leaves just a flag, it see...
CVE-2025-21077
Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege...
CVE-2025-21079
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...
MAL-2025-49365 Malicious code in dunnhumby-component-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b047f32f0323beace719a36eec364b2d804d556202950dae7942b04e2f2b09a The package dunnhumby-component-library was found to contain malicious code. Source: ossf-package-analysis...
MAL-2025-49364 Malicious code in supply_chain_supplyer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb82b4b36d6e82b7dff16e757aab9bf7ffce58bcd579bd38ad7cdd98da4c3e5 The package supplychainsupplyer was found to contain malicious code. Source: ossf-package-analysis...
CVE-2025-21079
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...
CVE-2025-21079
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...