TOTOLINK EX1200T 4.1.2cu.5215 - Authentication Bypass

TOTOLINK EX1200T 4.1.2cu.5215 is susceptible to authentication bypass. An attacker can bypass login by sending a specific request through formLoginAuth.htm, thus potentially being able to obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-42887 info:...

Malicious code in tailwind-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7605f83f25074e67fa0c72679d47f50fe781dae40e4560ee0a216e91320014 [email protected] is a typosquat of tailwindcss-animate. Its index.js appends an evalatob'...' blob that runs whenever the plugin is required e.g....

Malicious code in @keyv/memcache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738202807ef51e0d987243e641bb2e97a2f4535bed388d631d80ead963a82b2f Package @keyv/[email protected] is a Keyv storage adapter for Memcache. No install-time lifecycle scripts, network exfiltration, credential access,...

Malicious code in @keyv/mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e7b09271ef0584c4ab876898b9cb09c6cc8a0408bd4bbb7d623726d12c392e @keyv/mysql is the MySQL storage adapter for the keyv key-value abstraction. No exfiltration, install-time fetch-and-execute, silent-relay, credentia...

MAL-2026-12013 Malicious code in @keyv/encrypt-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c28175ab56ea558a0634ba48421de59c05f3ebc5e06335162cd2d30a6972495 No static or traced-code signals of installer-side attack were observed in this version of @keyv/encrypt-node. No lifecycle-script fetch-and-execute,...

Malicious code in sap-mcp-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd73a0cce0624f18914a46c4fd174111ed722c842cd0d664a16299ac145385ce The package name suggests an SAP MCP configuration helper ships lib/report.js which, from a postinstall hook, collects developer identity data — emai...

MAL-2026-11461 Malicious code in eth-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7fbf15a08eb3568d462e06fa345cfdb59afe88bf38b63e47ecea29ea92c009 The package presents itself as an Ethereum bridge library but its index.js is a verbatim copy of the well-known eth-sig-util signature utility...

CVE-2026-44090

Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a firewall. This may lead to the device being fully compromised...

CVE-2026-44090

CVE-2026-44090 describes a lack of authentication exposing an MQTT broker to unauthenticated remote access. The broker is only protected by an external firewall, enabling a network attacker to potentially take full control of the device. Documented impact includes high confidentiality, integrity,...

CVE-2026-44090

Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a firewall. This may lead to the device being fully compromised...

EUVD-2026-51025

Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a firewall. This may lead to the device being fully compromised...

CVE-2026-44090 Missing authentication for MQTT Broker

Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a firewall. This may lead to the device being fully compromised...

CVE-2026-12935

CVE-2026-12935 affects TL-WR940N v6 routers where the RTSP connection-tracking kernel module is vulnerable to a stack-based buffer overflow when a LAN client connects to a malicious RTSP server. This unauthenticated flaw can lead to denial-of-service or remote code execution, potentially compromi...

MAL-2026-11181 Malicious code in chain-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f9894b15a69a3c8a8cb1c75ee7c5dcb036293212fd2e29ca6676e27369ed79 The package is advertised as a docs/landing site for 'Theta Data API', but its main entry index.js re-exports a single value desKey sourced from...

MAL-2026-11038 Malicious code in svelte-streak-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45dbfe79dd6fb079811b798a734de0a661605d420454d97a0635dbdaec621efd The package contains no static or traced indicators of exfiltration, install-time remote code execution, silent-relay, credential distribution,...

MAL-2026-10920 Malicious code in alb-lambda-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e7f2cab2ae9d15c37e236190c685c42b7d3a0ecf92b7b72e9ad00b936ff186 Package name suggests an AWS CDK construct for ALB/Lambda but the shipped code is a thin @sentry/node wrapper. The npm preinstall script runs npm...

MAL-2026-10857 Malicious code in @gocortexio/npmgremlinbox-typosquat-moment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19008091c460cf10b254f3077108bad3b1c5289e85ae59ba7b873aff7d96866d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10834 Malicious code in @gocortexio/npmgremlinbox-malware-credential-harvesting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3356b51b55d6905b43444e0ce3552d56ad9af93ba2e040b8ba6a3e80da9a86bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10808 Malicious code in @gocortexio/npmgremlinbox-cc-by-sa-3-0-de (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89b99be8fcb87a9c06989edb3b62e804fa2ebea83cd48b65eeac6b57f1636629 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10454 Malicious code in nodemon-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb05cacc2c6d1059d9ee1d433398f8e39314ce83aed1429582e5fbb47e8f13a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...