PT-2025-48080

Name of the Vulnerable Software and Affected Versions OpenSearch versions prior to 3.2.0 Description A flaw exists in OpenSearch that enables attackers to trigger a Denial of Service DoS condition. This is achieved by providing complex query string inputs. Recommendations Update to version 3.2.0 ...

An In-Depth Systematic Analysis of the Security, Usability, and Automation Capabilities of Password Update Processes on Top-Ranked Websites

Password updates are a critical account security measure and an essential part of the password lifecycle. Service providers and common security recommendations advise users to update their passwords in response to incidents or as a critical cyber hygiene measure. However, password update processe...

EUVD-2025-100302

Malicious code in complexsailfishz3n npm...

EUVD-2025-106022

Malicious code in complexchipmunkz3n npm...

EUVD-2025-92687

Malicious code in complextunaz3n npm...

Malicious code in complex_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80fe03b6468701af418e3a2f295e8a11e8f6462ca5b54b09c1255406f454fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79577

Malicious code in complexwhippetz3n npm...

MAL-2025-100777 Malicious code in complex_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d2c28a41513cf050399552ca08a084478e1526c180f4666ab9f6ef0014ae0bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64874

Malicious code in complexmothz3n npm...

Malicious code in complex_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 984b385f050c97cdacd4a13d65e56a65ea5a09b9c9954a69fe01c6df88ab560f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complex_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3595bea57bd85a5db721b7ebc7fd510e6872550eaa630fa6beefd3db40db7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64872

Malicious code in complexpossumz3n npm...

EUVD-2025-64877

Malicious code in complexbarnaclez3n npm...

MAL-2025-93679 Malicious code in complex_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cc9fa7b40688130f5b762e5d90d647132705739cd64e34e446bb09fe768353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55277

Malicious code in complex-jade-tern npm...

EUVD-2025-55278

Malicious code in complex-gray-owl npm...

Malicious code in complex-bronze-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f387e3115bc0703a99c80a6e8560c0a352d073a7ff02ade2b32c48d8bdafe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55276

Malicious code in complex-peach-monkey npm...

EUVD-2025-55279

Malicious code in complex-bronze-rat npm...

MAL-2025-67369 Malicious code in complex-blue-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc346b51b32e89fe8756cd200d91de53ef6c0e01b28cd657ec0aa4d8894030d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...