Threat Intelligence for Exposure Management: How TI Powers Smarter CTEM Programs

Your security team has access to more vulnerability data than ever before. Scanners produce thousands of findings each week. Threat feeds deliver a steady stream of indicators. Yet most organizations still struggle with the same fundamental problem: deciding what to fix first. The disconnect...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21793)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21793 advisory. - In the Linux kernel, the following vulnerability has been resolved: spi: sn-f-ospi: Fix division by zero Whe...

MiracleLinux 9 : libxml2-2.9.13-3.el9 (AXSA:2023-4863:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-4863:02 advisory. libxml2: integer overflows with XMLPARSEHUGE CVE-2022-40303 libxml2: dict corruption caused by entity reference cycles CVE-2022-40304 Tenable has...

CVE-2026-21921

Summary (CVE-2026-21921) : A Use After Free in the chassis daemon (chassisd) of Juniper Junos OS and Junos OS Evolved can allow a network-based attacker with low privileges to cause a Denial-of-Service. The issue arises when telemetry collectors repeatedly subscribe/unsubscribe to sensors, causin...

CVE-2023-45626

An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code execution across boot cycles...

MAL-2025-188547 Malicious code in panspermia-oscillation-bioinformatics-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91373d25a0368f1b14587a511a5b8882955dbfcb47ee7e0849fcd671835d4185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187210 Malicious code in graviton-greatfilter-crust-quantum-computing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ed0b33f4c0ecef0f2595c287e16b232bac42416d16b964853dc0c9da5af2f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182990 Malicious code in itale-dci-jyhfyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d93ebb2dd845f1db7f13af9cb43306e82e05c413f5ac65b9c226ea2c639c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papmoa-0pia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284c7c0f3318106daeffb0218424cd355124f9327f4af6dda3ab3ebd98f1ac05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-nurdt-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b8d23a7932e96c7dbe946270864101678820d7756e0418aeeb8a18ee3c298f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174216 Malicious code in goditu-tma-diud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8082ef4ebb543f7b9e55b387500f173c0e73a393bf59ad84417d2049d3daeb7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174860 Malicious code in hunimi-satihu-angafagifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f78aad0adc2b583b9e2710f1f19675e4ff12304f3d05d7799ad6027098a01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in danielmorgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ddce2460d31df028545c0bfb50f043cc2854fa463acd4d85ffeb96b32c6d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fafdosafiaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f758e08e22d46c68e7e0fee568a320f6f741e10061a3d952530a8c90615fb23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 520e2561fe517184a8867a6f8b20132e0af761d1ffa09748f63401fc064c0ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-goadaotda-nutdardo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47e117c8f9de26eaa8effb6468fa0db9af5dce63a9491316b847f6eb0a027c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158165 Malicious code in lintang-tea10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddeacfea33c72893f3437f63b08bc3fa00e315ab8bc0b817b047b2510b7b74ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701d01b3de94c6c7fef2f94754583dcbfbf002135ba1a2e4f0d52114bce32c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyia-nikam-luyabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector babccd3b9fd427c3ced182b2b8ce56a2d60500f55ae28655b13676f90be33f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968cbdf08db3d3bdc7730b603abedd3e626175ac690315b1698dbc7c28dead66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...