Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

MAL-2025-179298 Malicious code in unimana-satgub-nainab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e088aa01cee90726df8eba7accd4a8b28b8f007f36d46ed1deac675a9589d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152468 Malicious code in alvira-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c094facace878597ba61fe7fa757972abcb40d7e2b5ae85923d44f54e61353b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-react-bootstrap-development-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b093b4a8a3b03954d6d7276fd2edf1d96030f0ffc91240dc63f59f9213f8fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114293 Malicious code in gita-lapis43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15bb6a96344812ca515dc5df377573f56e9402ad011b1a1a1cbdd4c38e9c410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-ongol-ongol90-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67af101ea1ebf25c9725d0cf0e37c20e6ecdb5c57b6d4751dbb1279fc097630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious-blush-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4629cb8898338b5ee87ffc8c024e3500d93929b0e8770e0f31606e253881a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2024-54897

Malicious code in bioql PyPI...

EUVD-2024-42906

Malicious code in bioql PyPI...

CVE-2025-8612

CVE-2025-8612 affects AOMEI Backupper Workstation. The flaw exists in the restore functionality: by creating a junction, an attacker can abuse the service to create arbitrary files and escalate privileges to SYSTEM. This requires local code execution with low privileges and administrator user int...

CVE-2024-48034

Unrestricted Upload of File with Dangerous Type vulnerability in fliperrr Creates 3D Flipbook, PDF Flipbook create-flipbook-from-pdf allows Upload a Web Shell to a Web Server.This issue affects Creates 3D Flipbook, PDF Flipbook: from n/a through = 1.2...

CVE-2024-48034

CVE-2024-48034: WordPress plugin Creates 3D Flipbook, PDF Flipbook (versions <= 1.2) allows unrestricted upload of files with dangerous types, enabling potential web shell upload to the server. Affected: Creates 3D Flipbook, PDF Flipbook

CVE-2024-23459 Multiple Arbitrary Creates/Overwrites by link following

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...