EUVD-2025-55585

Malicious code in brief-yellow-crayfish npm...

EUVD-2025-55588

Malicious code in brief-red-warbler npm...

Malicious code in brief-coral-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d6ae84abe6e7eda359884f6366ebfbf0697d69ff0166cf351c0b03c352a3fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55589

Malicious code in brief-coral-tortoise npm...

EUVD-2025-55587

Malicious code in brief-silver-mite npm...

MAL-2025-67059 Malicious code in brief-bronze-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556577ff2fa6488cbaed42bd13ccf406ceae7fd8ee8bb96292d3d307ca748668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief-white-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9205c506b06060d964a390a54f5c37a98c42e81697f27ccae973a907fb2ed40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55591

Malicious code in brief-blush-guineafowl npm...

EUVD-2025-60520

Malicious code in briefharrierz3n npm...

MAL-2025-62118 Malicious code in brief_harrier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5af18f7c910b05288216d80c07ce21a0152a089cac5bb01d2fa42c8c073697b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-48556

Malicious code in briefwaspz3n npm...

Malicious code in test-mlw2-snags-fomes-brief-polks (npm)

The package test-mlw2-snags-fomes-brief-polks was found to contain malicious code...

Malicious code in @malware-test-brief-ilium-huffy-tangi/test-mlw3-brief-ilium-huffy-tangi (npm)

The package @malware-test-brief-ilium-huffy-tangi/test-mlw3-brief-ilium-huffy-tangi was found to contain malicious code...

MAL-2025-36265 Malicious code in test-mlw2-snags-fomes-brief-polks (npm)

The package test-mlw2-snags-fomes-brief-polks was found to contain malicious code...

CVE-2025-30406

creationtimestamp| type| source ---|---|--- 2025-04-03 19:35:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10326 2025-04-03 21:06:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llwsmf36672w 2025-04-03 23:36:28+00:00| seen| https://t.me/cvedetector/22026 2025-04-04...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-41713link is external Mitel MiCollab Path Traversal Vulnerability CVE-2024-55550link is external Mitel MiCollab Path Traversal Vulnerability CVE-2020-2883lin...

CVE-2024-0132

creationtimestamp| type| source ---|---|--- 2024-09-26 08:46:30+00:00| seen| https://t.me/cvedetector/6385 2024-09-27 09:03:26+00:00| seen| https://t.me/KomunitiSiber/2638 2024-09-27 11:57:43+00:00| seen| Telegram/RuAQlUKocXlT4ofSDLT3CByJGT5eproP32lBf1VKLLCew 2024-09-27 11:57:44+00:00| seen|...

Informational: Impact of Malicious Code in XZ Tools and Libraries (CVE-2024-3094)

The Palo Alto Networks Product Security Assurance team has evaluated the supply chain compromise impacting versions 5.6.0 and 5.6.1 of XZ tools and libraries. These versions of the software may allow unauthorized access to affected systems. Based on the information presently known, Palo Alto...

Ransomware gangs and Living Off the Land (LOTL) attacks: A deep dive

We’ve told you about ransomware-as-a-service RaaS gangs; we’ve told you about living off the Land LOTL attacks. What do you get when you bring the two together? Bad news. Our recent report, Threat Brief: Ransomware Gangs & Living Off the Land Attacks, takes a deep dive into why the intersection o...

Ash Allen Design Suleve 5-in-1 Smart Door Lock 安全漏洞

Ash Allen Design Suleve 5-in-1 Smart Door Lock is a 5-in-1 fingerprint smart lock from Ash Allen Design. A security vulnerability exists in the Suleve 5-in-1 Smart Door Lock v1.0 version. An attacker exploiting this vulnerability could create a cloned tag by briefly physically approaching the...