2405 matches found
CVE-2025-30186
Malicious content uploaded as file can be used to execute script code when following attacker-controlled links. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Please deploy the provided updates and patch releases. No public...
CVE-2025-30186
Malicious content uploaded as file can be used to execute script code when following attacker-controlled links. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Please deploy the provided updates and patch releases. No public...
PT-2025-48258
Malicious content uploaded as file can be used to execute script code when following attacker-controlled links. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Please deploy the provided updates and patch releases. No public...
PT-2025-48255
Malicious content uploaded as file can be used to execute script code when following attacker-controlled links. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Please deploy the provided updates and patch releases. No public...
CVE-2025-64307
The Brightpick Internal Logic Control web interface is accessible without requiring user authentication. An unauthorized user could exploit this interface to manipulate robot control functions, including initiating or halting runners, assigning jobs, clearing stations, and deploying storage totes...
EUVD-2025-180007
Malicious code in book-web-deploy-object-byte npm...
EUVD-2025-179140
Malicious code in encrypt-bundle-test-deploy-scale npm...
EUVD-2025-177762
Malicious code in moon-old-gamma-deploy-cloud npm...
EUVD-2025-179853
Malicious code in cat-compile-analyze-deploy-cloud npm...
EUVD-2025-175623
Malicious code in web-compile-deploy-load-secure npm...
EUVD-2025-178369
Malicious code in interpret-deploy-omega-async-fire npm...
Malicious code in moon-old-gamma-deploy-cloud (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5c4869ddd3ada1d30aaaa35c240e8d99748ce6917156ee14dd323fe2ec849a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190253 Malicious code in web-compile-deploy-load-secure (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0b89eb11df0d45c9af94679854dc0e9edd6be08c36b6b9efed4a24abaf2a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176530
Malicious code in sanitize-analyze-benchmark-deploy-encode npm...
EUVD-2025-179321
Malicious code in deploy-thread-scale-omega-enum npm...
EUVD-2025-178229
Malicious code in kappa-awk-deploy-simulate-encrypt npm...
Malicious code in beta-moon-fast-authorize-deploy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04718f9575365342a95b182394e3faf16985b0f54304fe8408cb783b9ba9d07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179322
Malicious code in deploy-good-data-double-unix npm...
Malicious code in encrypt-bundle-test-deploy-scale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcaefcbdd1ffb8c51e8f0e7b02fe563dd40e979c5d81f3dc6babebe9775f54bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...