1304 matches found
MAL-2025-59499 Malicious code in wibowo-kue90-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 815acbe768fb6dcc21f158a3810f012b5238e4660d8e4918031406b0054f38c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-56483 Malicious code in gita-empal41-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3956739fd6059d7247dde0c8754a8fa4146c52af471fe30f93e34813df929287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-57082 Malicious code in joko-ubi65-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5857148346e1ac4c018b792ba929317d175589da812c827dba76e6b1f6cfbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in irma-gepuk96-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b82203de665555a62377320c883fab7e011827cb704aaefc34338503647a4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lina-rujak45-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f5c1c1aabaf6ca9a7a058aa928ebf58de932a25f194e148878f929ae90f593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-54032 Malicious code in oktafian-kacang8-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf91ea204b1ff3fd59ad98e571397c7d33743727be13a67fb61439c5a7b86a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in indah-soto68-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d144e7d94a9ca7d18ed779f594c971358dc3d4662030dac2b1714989dc4ae4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-54482 Malicious code in qori-klanting23-tititugel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5c37e399aeb07ec0e5a36ad4804c3cfd1fb649d3ba2daf1069c5a8753f167e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nadia-nasiuduk14-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f26f929adf468b0f5595aa2984293b77d44259058c51b679e8bc05a29eee0a7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-53600 Malicious code in ocha-ketan15-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 057288518fae5c38e3ebdb6f16f92434b180bbf429c662f38c1bd3cab13da42b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-52546 Malicious code in umi-kemplang36-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1fa55bc44034d6f1c56100cf12ef1cd7b7ebfc7428ee73cb53c876d7ab245e1 The package umi-kemplang36-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...
MAL-2025-50463 Malicious code in galih-rendang24-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc46ceb9fbef801faba435bd66a4c36051dbcadb48dad3f49f43a8f3f85c87b The package galih-rendang24-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
Malicious code in andi-keripik65-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641d591dcc8916554086c3744775cc5b906279731b6cdbc544fe073ff0e92d66 The package andi-keripik65-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
Malicious code in dono-lepet19-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29362e690edadf049901556fd81d29b06ce41042dc64c2d250b2bfdb5dedb4ea The package dono-lepet19-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
PT-2025-46143
Name of the Vulnerable Software and Affected Versions HBS 3 Hybrid Backup Sync versions prior to 26.2.0.938 Description An external control of file name or path issue exists in HBS 3 Hybrid Backup Sync. An attacker with local network access can potentially read or modify files and directories...
PT-2025-46142
Name of the Vulnerable Software and Affected Versions QNAP HBS 3 Hybrid Backup Sync versions prior to 26.2.0.938 Description A flaw exists in QNAP HBS 3 Hybrid Backup Sync related to incorrect path restriction for an access-limited directory. Successful exploitation by a remote attacker could lea...
CVE-2025-12636
The Ubia camera ecosystem fails to adequately secure API credentials, potentially enabling an attacker to connect to backend services. The attacker would then be able to gain unauthorized access to available cameras, enabling the viewing of live feeds or modification of settings...
CVE-2025-12636
The Ubia camera ecosystem fails to adequately secure API credentials, potentially enabling an attacker to connect to backend services. The attacker would then be able to gain unauthorized access to available cameras, enabling the viewing of live feeds or modification of settings...
PT-2025-45388
Name of the Vulnerable Software and Affected Versions Ubia camera ecosystem affected versions not specified Description The Ubia camera ecosystem does not adequately secure API credentials, potentially allowing an attacker to connect to backend services. Successful exploitation could grant an...
