1302 matches found
MAL-2025-53449 Malicious code in nana-empal61-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665475225c7eb39997744af62372413d9f87e691950978a42c1043bb7791339a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-52225 Malicious code in maya-gorengan12-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4087ec19070c13291c44d5df4b15676a98f44a5095021d2631bc1eb39d5a8991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hendra-toge41-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5722d7cfa92fff27b3649a7ace46abdf9cebcab810472dbaa1cc3b1cc6eb1fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-52338 Malicious code in ocha-kue33-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1168f1edd2caae79be646f87f1443c19f93198517b5af610710879839668bfc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-51282 Malicious code in cici-kolak25-kyuki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4516508abb2f179e868d45c025150ec76a5cf073d57c1f3e26c5cefadb44a579 The package cici-kolak25-kyuki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
MAL-2025-50575 Malicious code in udin-jus45-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79dd783f478b5f22fca00bdff2c3aee79b67940a713bc142d9564e9824b68090 The package udin-jus45-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded np...
Malicious code in bella-semur20-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b03d61d30f4363a0471385d1a724bc7b6aad093b80c9eb7b345542ee0108622 The package bella-semur20-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...
Malicious code in dewanto-tumis75-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 177d94c15be570f835c5c94c1c5ef30d5878f4f93c2a81ea26ba62769113fbfe The package dewanto-tumis75-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
MAL-2025-51182 Malicious code in candra-getuk21-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7bf0820bf15bf10cafbe308361047a14368cd58d8a1de1b4b117d133e135d4 The package candra-getuk21-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...
Malicious code in ade-kripik77-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545809d21f21c0c605c19ca0a7be421f462cbfea7c28767a536f0db7c7e77297 The package ade-kripik77-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
Malicious code in wati-kripik80-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910358a7149e051b85f1027e3d048a1fcff42ad951756d53ef9f7d85b20bac10 The package wati-kripik80-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...
Malicious code in bayu-ketan54-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca196dd9c9b98550a4e15df7bb888381d557224792c95cb3ddf8ec7b587be514 The package bayu-ketan54-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
MAL-2025-52376 Malicious code in tania-kentang57-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee2ed24be5b9932a0e0ff604c228dcac46b12f6ee0588d8e586a3f4bdcce91f The package tania-kentang57-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
Siemens SIMATIC Devices Use After Free (CVE-2024-36899)
In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfochangednotify The use-after-free issue occurs as follows: when the GPIO chip device file is being closed by invoking gpiochrdevrelease, watchedlines is freed by bitmapfree, but the...
CVE-2025-61796
Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse...
CVE-2025-49552
Adobe Connect is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability in versions 12.9 and earlier. The issue is caused by improper handling/validation of user input, enabling a high-privileged attacker to execute scripts in a victim’s browser and potentially hijack a session. Exploit...
CVE-2025-54266 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript ma...
PT-2025-42203
Name of the Vulnerable Software and Affected Versions Adobe Connect versions 12.9 and earlier Description A DOM-based Cross-Site Scripting XSS issue exists in Adobe Connect. A high-privileged attacker could exploit this to execute malicious scripts in a victim’s browser. Exploitation requires a...
