Malicious code in adjacent_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b44ddff254610d706fc802b2bdd49c94aa5a2e67e237c71f5e85f7675cea51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adjacent-aqua-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f0a296f427c03808700c5dff385e436352a710bfa118538f2da04d7c12055d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66656 Malicious code in adjacent-rose-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870f5fc909ca537cd8ef1eb8e6ce7b00d64c88a10f8ac1f708785ec84bf6f465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adjacent-plum-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f5f5340235047b019f969559dac485216fc7178a90dac427e82d72394cc644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55997

Malicious code in adjacent-aqua-heron npm...

EUVD-2025-55993

Malicious code in adjacent-rose-smelt npm...

EUVD-2025-55995

Malicious code in adjacent-peach-viper npm...

EUVD-2025-55996

Malicious code in adjacent-magenta-python npm...

EUVD-2025-55994

Malicious code in adjacent-plum-puma npm...

MAL-2025-66653 Malicious code in adjacent-magenta-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359afc346aae1c37cbbb589d084f5919491ad657babbff3571d6c8315eb83b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46438

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows versions prior to 23.160 Description An out-of-bounds write issue exists in IntelR PROSet/Wireless WiFi Software for Windows. This flaw, located within Ring 2: Device Drivers, could allow for a...

PT-2025-46436

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows versions prior to 23.160 Description An out-of-bounds read issue exists in some IntelR PROSet/Wireless WiFi Software for Windows. This flaw, located within Ring 2: Device Drivers, could allow fo...

PT-2025-46234

Name of the Vulnerable Software and Affected Versions SAP Business Connector affected versions not specified Description A Path Traversal issue exists in SAP Business Connector. An attacker with administrator privileges and adjacent access can read, write, overwrite, and delete arbitrary files on...

PT-2025-46392

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description A protection mechanism failure exists in some IntelR CIP software. This issue, occurring within Ring 3 User Applications, may allow an information disclosure. An unprivilege...

PT-2025-46232

Name of the Vulnerable Software and Affected Versions SAP Business Connector affected versions not specified Description An OS Command Injection issue exists in SAP Business Connector. An authenticated attacker with administrative access and adjacent network access can upload specially crafted...

Malicious code in adjacent_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdb8597e4ea46b906187cc8706855a51c08aba84ee998160393a1037615db77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50743

Malicious code in adjacentcapybaraz3n npm...

CVE-2025-53880

A Path Traversal vulnerability in the tftpsync/add and tftpsync/delete scripts allows a remote attacker on an adjacent network to write or delete files on the filesystem with the privileges of the unprivileged wwwrun user. Although the endpoint is unauthenticated, access is restricted to a list o...

CVE-2025-21078

Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications...

CVE-2025-59596

CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12. If a local networking policy is active, attackers on an adjacent network may be able to send a crafted packet and cause the client system to crash...