@cycle-mega-driver/database (>=0.2.1 <=0.3.2), @fluidnotions/rx-pouch (>=0.6.7 <=0.6.8) +2 more potentially affected by unknown CVE via flatten-unflatten (=1.0.0)

flatten-unflatten NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flatten-unflatten and may be impacted: - @cycle-mega-driver/database =0.2.1, =0.6.7, =1.0.0, =0.3.0, =0.6.9 Source cves: unknown CVE Source advisory:...

Siemens APOGEE PXC and TALON TC Series Expected Behavior Violation (CVE-2025-40555)

Affected devices start sending unsolicited BACnet broadcast messages after processing a specific BACnet createObject request. This could allow an attacker residing in the same BACnet network to send a specially crafted message that results in a partial denial of service condition of the targeted...

6 Actionable Vulnerability Management Best Practices

Every unpatched vulnerability is more than just a technical flaw; it's a direct business risk. These security gaps are the entry points for breaches that lead to devastating financial losses, operational downtime, and long-term damage to your brand's reputation. When viewed through this lens,...

Malicious code in loop-cosmos-perturbation-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9531a3858a703e8badb0753f120e1b0371cacf46b3ab74d2fcef9143c861a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epsilon-beta-key-double-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0681495491db7e545763d456b2c3b521039fbd9b347d6741ec1d056df57936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viguvuiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3b7be3e3de6e17c48a9f4dd7b3c302d4f6c55a5f46f39fc5ee0c60605ae70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179784 Malicious code in lookingan-jaja104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57571e3955a660e27438d4078abedfaed1840f01629a47b150d6762e80142d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176803 Malicious code in nuilva-darde-fagafiafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6769c6d722951e9714490aaace660f1763d443fde177f782bb855b7b914aeeac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52e4811d91e24eae0a78ff4a7fdd2e608ec6c5e7889a35b638bc1251025d9ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lumi-knal1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9417cce5cb2c9c581d3a15a6390918591472c99f695a8f3659f58d0eace1e1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-naiman36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93d81901c292cbcec78843ad8b166aba2e70458d547ce496ebc6fcc3757f16d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163248 Malicious code in nokire-nana9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834e0352fc0b64a64530d5ed072264c52f445183c30f8803f2934d4a65b4a618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152062 Malicious code in aji-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3a9b3c49a9d9be8dad75f90d2142934c2b4e12056785248d37f54c094838f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153042 Malicious code in avminah-affa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de147e0d11c015473dd8b469a3fcf25e2fce4c07242023c84cf25cfa64117814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164811 Malicious code in rinto-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd9a3685c49f581c453dcb1fd6d3d0a4428a6d55045b6d0cc7a6fd0580598951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyud-vamuanmuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326afedae9cbb3acc9b828f616183216e859e46b76a4f4bef2e4a7ad95910a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163176 Malicious code in nokire-nana24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55fab8903f864e94d3faace2bd922543bb3c90162a6ac15eac1da781a78be1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157931 Malicious code in lala-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666b9c68a57017e77a7bbd80cb54c1170283a7468ce4b6c98406cdd924f2c13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e4851a566a5b4a173195fcc928cc8d7ab39f18cbd39706236159ebe09996cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168898 Malicious code in technical-alon-tol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a6d82bd24d9dc06fb9fcec2d1626090cea36339617e2e256a304f9df56a9d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...