49 matches found
EUVD-2025-55525
Malicious code in cautious-brown-narwhal npm...
EUVD-2025-55523
Malicious code in cautious-moccasin-nightingale npm...
EUVD-2025-55524
Malicious code in cautious-ivory-platypus npm...
Malicious code in cautious-ivory-platypus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ef0c612eb1aeca2a8c793e38ddf229a64d7a994283eacc86580d8261922da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cautious-silver-bonobo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459b3a6f9f8139a4539a0838fbe6b3e34609a18eb1a82e1a91457fcf5fa02304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cautious-red-weasel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 332780866d7f810b5ef4ab85c3d89cea9eb7972a28350f13c258656ce9cd49e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cautious-blush-lamprey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb927e3912bedd6129b6e72b1c39e04eee32126566e8274b0822ae83946c7b8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-55526
Malicious code in cautious-blush-lamprey npm...
MAL-2025-67128 Malicious code in cautious-red-weasel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 332780866d7f810b5ef4ab85c3d89cea9eb7972a28350f13c258656ce9cd49e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in @lbnqduy180500/cautious-octo-sniffle (npm)
The package @lbnqduy180500/cautious-octo-sniffle was found to contain malicious code...
MAL-2025-42669 Malicious code in @lbnqduy180500/cautious-octo-sniffle (npm)
The package @lbnqduy180500/cautious-octo-sniffle was found to contain malicious code...
Malicious code in @lbnqduy/cautious-happiness (npm)
The package @lbnqduy/cautious-happiness was found to contain malicious code...
MAL-2025-8321 Malicious code in @lbnqduy/cautious-happiness (npm)
The package @lbnqduy/cautious-happiness was found to contain malicious code...
MAL-2024-7457 Malicious code in kurxjy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd35d272c3dff6b054100efada55b4fa40fb7356dee1daa1235fd9bda23b871e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
9 basic security tips for seniors
Before we get into the tips: a caveat. We know many seniors who are digitally more up to date than people 20 years younger, but for those who aren't, this guide is for you. If youre offended by the word seniors in the title, feel free to replace it with "computer illiterate people." And keep in...
GHSA-C84H-W6CR-5V8Q Markdown-supplied Shell Command Execution
Impact lookatme versions prior to 2.3.0 automatically loaded the built-in "terminal" and "fileloader" extensions. Users that use lookatme to render untrusted markdown may have malicious shell commands automatically run on their system. Patches Users should upgrade to lookatme versions 2.3.0 or...
Microsoft Team Foundation Server CVE-2019-1305 Cross Site Scripting Vulnerability
Description Microsoft Team Foundation Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site...
Microsoft Windows JET Database Engine CVE-2019-0906 Remote Code Execution Vulnerability
Description Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10...
Microsoft Windows GDI Component CVE-2019-1011 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems...
Holiday Scams and Malware Campaigns
As the holidays approach, the Cybersecurity and Infrastructure Security Agency CISA reminds users to be aware of seasonal scams and malware campaigns. Users should be cautious of unsolicited emails that contain malicious links or attachments with malware, advertisements infected with malware, and...