305 matches found
MAL-2025-70375 Malicious code in rich-chocolate-dog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d72c0b5c208569b8f9bc3f3077896bc67b00c12e5abe0f2007f67bd99cb3861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-55392
Malicious code in coastal-tan-dog npm...
Malicious code in coastal-tan-dog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419c4f444be457d9c8bcb0836f219b760e6cdf7836078460366dcc45d02194c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-49575
Malicious code in properdogz3n npm...
Malicious code in lesser_dog_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615a2aaa20611febb4163eb3fbeb28706e5ee7cca355bc6fa52bc782c9754ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in delightful_dog_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec065b78180a13cbbc09042fa862757efdc45f304d7fd52f781d2e4c2cc4849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-59275 Malicious code in victorious_dog_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe5a5f08a2cf1c079b0e8e80a5d71bef1e2255bed21b27bd4e9ea93834e2916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in victorious_dog_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe5a5f08a2cf1c079b0e8e80a5d71bef1e2255bed21b27bd4e9ea93834e2916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2014-5797
Malware in sbrugna...
EUVD-2023-53753
Malicious code in bioql PyPI...
EUVD-2023-32347
Malicious code in bioql PyPI...
Detour Dog Caught Running DNS-Powered Malware Factory for Strela Stealer
A threat actor named Detour Dog has been outed as powering campaigns distributing an information stealer known as Strela Stealer. That's according to findings from Infoblox, which found the threat actor to maintain control of domains hosting the first stage of the stealer, a backdoor called...
Detour Dog’s DNS Hijacking Infects 30,000 Websites with Strela Stealer
Infoblox reveals how the Detour Dog group used server-side DNS to compromise 30,000+ sites across 89 countries, installing the stealthy Strela Stealer malware...
D-Link DCS-825L 安全漏洞
D-Link DCS-825L is a wireless network camera from China AUO D-Link. A security vulnerability exists in D-Link DCS-825L v1.08.01, which stems from improper handling of the mydlink-watch-dog.sh script, which may result in elevated privileges...
D-Link DCS-825L 安全漏洞
The D-Link DCS-825L is a wireless webcam from China AUO D-Link. A security vulnerability exists in the D-Link DCS-825L version 1.08.01 and earlier, which stems from the mydlink-watch-dog.sh script that does not verify binary integrity, which could lead to persistent arbitrary code execution...
MAL-2025-26582 Malicious code in mock-cloud-encrypt-gamma-dog (npm)
The package mock-cloud-encrypt-gamma-dog was found to contain malicious code...
Malicious code in deploy-benchmark-fork-bundle-dog (npm)
The package deploy-benchmark-fork-bundle-dog was found to contain malicious code...
Malicious code in container-dog-omicron-beta-route (npm)
The package container-dog-omicron-beta-route was found to contain malicious code...