305 matches found
EUVD-2025-54140
Malicious code in genuine-magenta-dog npm...
Malicious code in lazy-magenta-dog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba193a368057a545eb832f707d6ac91355d50f84b8ef33bfb83c27f5881bab45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-68703 Malicious code in honest-apricot-dog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d82c0730350dacc8680a8a79e5e68bb12591a1410498ecfbaf67ab21973890be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-71449 Malicious code in victorious-aquamarine-dog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0415979ae4d869f2df080427e26ffc580d00fe6b177561854384f8f7a4a2e49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in delightful_dog_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec065b78180a13cbbc09042fa862757efdc45f304d7fd52f781d2e4c2cc4849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-49575
Malicious code in properdogz3n npm...
Malicious code in lesser_dog_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615a2aaa20611febb4163eb3fbeb28706e5ee7cca355bc6fa52bc782c9754ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in victorious_dog_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe5a5f08a2cf1c079b0e8e80a5d71bef1e2255bed21b27bd4e9ea93834e2916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-59275 Malicious code in victorious_dog_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe5a5f08a2cf1c079b0e8e80a5d71bef1e2255bed21b27bd4e9ea93834e2916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2014-5797
Malware in sbrugna...
EUVD-2023-53753
Malicious code in bioql PyPI...
EUVD-2023-32347
Malicious code in bioql PyPI...
Detour Dog Caught Running DNS-Powered Malware Factory for Strela Stealer
A threat actor named Detour Dog has been outed as powering campaigns distributing an information stealer known as Strela Stealer. That's according to findings from Infoblox, which found the threat actor to maintain control of domains hosting the first stage of the stealer, a backdoor called...
Detour Dog’s DNS Hijacking Infects 30,000 Websites with Strela Stealer
Infoblox reveals how the Detour Dog group used server-side DNS to compromise 30,000+ sites across 89 countries, installing the stealthy Strela Stealer malware...
D-Link DCS-825L 安全漏洞
D-Link DCS-825L is a wireless network camera from China AUO D-Link. A security vulnerability exists in D-Link DCS-825L v1.08.01, which stems from improper handling of the mydlink-watch-dog.sh script, which may result in elevated privileges...
D-Link DCS-825L 安全漏洞
The D-Link DCS-825L is a wireless webcam from China AUO D-Link. A security vulnerability exists in the D-Link DCS-825L version 1.08.01 and earlier, which stems from the mydlink-watch-dog.sh script that does not verify binary integrity, which could lead to persistent arbitrary code execution...
Malicious code in sigma-scale-fire-dog-decode (npm)
The package sigma-scale-fire-dog-decode was found to contain malicious code...
MAL-2025-23264 Malicious code in integer-stack-uglify-decrypt-dog (npm)
The package integer-stack-uglify-decrypt-dog was found to contain malicious code...