EUVD-2025-177466

Malicious code in omicron-bundle-file-final-warn npm...

Malicious code in xi-minify-bundle-sigma-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d9afe7d7141055c0838ad1a3d5294b15a110475b4a168a1ba8da29c0f3f468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179140

Malicious code in encrypt-bundle-test-deploy-scale npm...

EUVD-2025-178224

Malicious code in kappa-lambda-bundle-omega-bad npm...

EUVD-2025-179941

Malicious code in bundle-theta-virtualize-sanitize-sigma npm...

EUVD-2025-180145

Malicious code in bad-old-deserialize-bundle-boolean npm...

Malicious code in encrypt-bundle-test-deploy-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcaefcbdd1ffb8c51e8f0e7b02fe563dd40e979c5d81f3dc6babebe9775f54bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178827

Malicious code in function-bundle-log-validate-grid npm...

EUVD-2025-175484

Malicious code in xi-minify-bundle-sigma-query npm...

EUVD-2025-178373

Malicious code in interface-iota-tau-optimize-bundle npm...

EUVD-2025-179943

Malicious code in bundle-alert-runtime-private-bundle npm...

EUVD-2025-179251

Malicious code in double-decode-encrypt-cache-bundle npm...

Malicious code in analyze-signal-bundle-query-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9ac109472152832caa800b02a3b34b918e75736ec1e24c065add9391558992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176941

Malicious code in public-bundle-class-iota-thread npm...

EUVD-2025-176236

Malicious code in stack-bundle-public-air-user npm...

EUVD-2025-178905

Malicious code in final-bundle-zero-string-deserialize npm...

EUVD-2025-180434

Malicious code in analyze-signal-bundle-query-mock npm...

Siemens SIMATIC S7-1500 Uncaught Exception (CVE-2024-28835)

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the certtool --verify-chain command. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

MAL-2025-153165 Malicious code in avminah-fagmaas-adfimsia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b03500685d2e34be58fa713d2051dc975d4fbf69bc624f0e77a29d628cc1666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

curl: Silent TLS Trust Model Hijacking via `CURL_CA_BUNDLE` Environment Variable Leads to MITM

Summary: curl is vulnerable to silent Man-in-the-Middle MITM attacks due to its design, which implicitly trusts the CA certificate path specified in the CURLCABUNDLE environment variable. This mechanism allows the entire TLS trust model chain of trust of curl to be hijacked without any warning or...