305 matches found
MAL-2025-67257 Malicious code in coastal-tan-dog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419c4f444be457d9c8bcb0836f219b760e6cdf7836078460366dcc45d02194c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-71662 Malicious code in xenacious-harlequin-dog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92fb50e04607bcbd3966b5b927b82365f2f87c2f22bd1e627c81e0d27545341e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-70375 Malicious code in rich-chocolate-dog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d72c0b5c208569b8f9bc3f3077896bc67b00c12e5abe0f2007f67bd99cb3861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-49575
Malicious code in properdogz3n npm...
Malicious code in lesser_dog_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615a2aaa20611febb4163eb3fbeb28706e5ee7cca355bc6fa52bc782c9754ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in delightful_dog_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec065b78180a13cbbc09042fa862757efdc45f304d7fd52f781d2e4c2cc4849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in victorious_dog_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe5a5f08a2cf1c079b0e8e80a5d71bef1e2255bed21b27bd4e9ea93834e2916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-59275 Malicious code in victorious_dog_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe5a5f08a2cf1c079b0e8e80a5d71bef1e2255bed21b27bd4e9ea93834e2916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2014-5797
Malware in sbrugna...
EUVD-2023-32347
Malicious code in bioql PyPI...
EUVD-2023-53753
Malicious code in bioql PyPI...
Detour Dog Caught Running DNS-Powered Malware Factory for Strela Stealer
A threat actor named Detour Dog has been outed as powering campaigns distributing an information stealer known as Strela Stealer. That's according to findings from Infoblox, which found the threat actor to maintain control of domains hosting the first stage of the stealer, a backdoor called...
Detour Dog’s DNS Hijacking Infects 30,000 Websites with Strela Stealer
Infoblox reveals how the Detour Dog group used server-side DNS to compromise 30,000+ sites across 89 countries, installing the stealthy Strela Stealer malware...
D-Link DCS-825L 安全漏洞
D-Link DCS-825L is a wireless network camera from China AUO D-Link. A security vulnerability exists in D-Link DCS-825L v1.08.01, which stems from improper handling of the mydlink-watch-dog.sh script, which may result in elevated privileges...
D-Link DCS-825L 安全漏洞
The D-Link DCS-825L is a wireless webcam from China AUO D-Link. A security vulnerability exists in the D-Link DCS-825L version 1.08.01 and earlier, which stems from the mydlink-watch-dog.sh script that does not verify binary integrity, which could lead to persistent arbitrary code execution...
Malicious code in zeta-fire-throw-dog-encode (npm)
The package zeta-fire-throw-dog-encode was found to contain malicious code...
Malicious code in byte-dog-phi-fire-root (npm)
The package byte-dog-phi-fire-root was found to contain malicious code...
Malicious code in object-cache-dog-test-byte (npm)
The package object-cache-dog-test-byte was found to contain malicious code...