Malicious code in defiant-black-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99cccef3ae2da7cbe54727e0b350d64fc8c111fef8d5ae1ac6f17e81a09a8619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54974

Malicious code in defiant-blush-pheasant npm...

EUVD-2025-54975

Malicious code in defiant-black-gull npm...

Malicious code in defiant-blush-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a0af6cf1ef9c1ca04608cf29f1ad0841cb454bfdcaa39f8d8f3f979dbcc7f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defiant-coral-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6730a9a518989a00efef7cc6939e47deed3b2b31b7a5d1ddbb1ac93c2ec57e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defiant-peach-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42111608494ce914f66cc762b51cbf246b81e8531db1e35fdd132ac21d59665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defiant-lavender-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d61ab6e2e6315ea624ace1a8228ae93e4e1a6da1bdfb6004ec0f547d8361231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54971

Malicious code in defiant-peach-frog npm...

MAL-2025-67675 Malicious code in defiant-blush-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a0af6cf1ef9c1ca04608cf29f1ad0841cb454bfdcaa39f8d8f3f979dbcc7f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67676 Malicious code in defiant-coral-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6730a9a518989a00efef7cc6939e47deed3b2b31b7a5d1ddbb1ac93c2ec57e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67678 Malicious code in defiant-peach-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42111608494ce914f66cc762b51cbf246b81e8531db1e35fdd132ac21d59665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defiant_hyena_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c130a745096f45a7caa8b1cdbfc58dd5461b24bf1ebde576069ea5faa4c83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60251 Malicious code in defiant_hyena_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c130a745096f45a7caa8b1cdbfc58dd5461b24bf1ebde576069ea5faa4c83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60252 Malicious code in defiant_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5b7d0e695aedd799836f92c1a9e44f63855a40b19f5b10ee8d2d8b5f88f60bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2018-6872

Malware in sbrugna...

Barracuda Warns of Zero-Day Exploited to Breach Email Security Gateway Appliances

Email protection and network security services provider Barracuda is warning users about a zero-day flaw that it said has been exploited to breach the company's Email Security Gateway ESG appliances. The zero-day is being tracked as CVE-2023-2868 and has been described as a remote code injection...

Design/Logic Flaw

The Coolpad Defiant Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys and the T-Mobile Revvl Plus Coolpad/alchemy/alchemy:7.1.1/143.14.171129.3701A-TMO/buildfnj02-206:user/release-keys Android devices contain a pre-installed platform app with a package name of...

Design/Logic Flaw

The Coolpad Defiant device with a build fingerprint of Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys, the ZTE ZMAX Pro with a build fingerprint of ZTE/P895T20/urd:6.0.1/MMB29M/20170418.114928:user/release-keys, and the T-Mobile Revvl Plus with a build fingerprint of...

CVE-2018-14990

The Coolpad Defiant device with a build fingerprint of Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys, the ZTE ZMAX Pro with a build fingerprint of ZTE/P895T20/urd:6.0.1/MMB29M/20170418.114928:user/release-keys, and the T-Mobile Revvl Plus with a build fingerprint of...

CVE-2018-14991

The Coolpad Defiant device with a build fingerprint of Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys, the ZTE ZMAX Pro with a build fingerprint of ZTE/P895T20/urd:6.0.1/MMB29M/20170418.114928:user/release-keys, and the T-Mobile Revvl Plus with a build fingerprint of...