PT-2026-29139

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.24.2 Description FreeRDP is a free implementation of the Remote Desktop Protocol. In versions prior to 3.24.2, the yuv ensure buffer function within libfreerdp/codec/h264.c updates h264-width and h264-height before...

Evaluating MCC for Low-Frequency Cyberattack Detection in Imbalanced Intrusion Detection Data

In many real-world network environments, several types of cyberattacks occur at very low rates compared to benign traffic, making them difficult for intrusion detection systems IDS to detect reliably. This imbalance causes traditional evaluation metrics, such as accuracy, to often overstate model...

Malicious code in quantum-exosphere-vortex-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a8dfbfb03df9e686bbfc44f4f424a75d1ca4f283e5c4dd99b97ae0e381a73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-gulp-npm-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5294aad7730d18543319acfe8ea7de730b6de8160892ee5e56072e4c6a5f6a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-config-unuk-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be45cfa8332efa48889c39ea7acf947b99ce9fc254f407db0c6e462ae8de03c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-ophiuchus-request-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894e22879845ad696f15e64f90cbac43dcd710f450574a8380386811c09f27d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178399

Malicious code in innercore-biohacking-aether-inflation npm...

Malicious code in quark-perturbation-lyra-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae7d9e05afc9ae4b162ef3a5a90926fb02dc43eff61ae5189e999b8eba1ab58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-prettier-frontend-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659e8b9f5234bf3784b1ddbfde8f82519b786322f78a3a6131c158daba967810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-supercluster-exobiology-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caed8990fdf184f5ab65614efd7c6f182f9c3d9519fa198517d3ca7c0a7bdee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-fornax-chariklo-geochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bea88bb2438959eb72a95c8ba6f1c94ccc913f35cdb84ec7d3884727d656df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-bulma-augmentedreality-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a98a414d2ee0424f8b9bf8fc79623e0b8b7fa9ff1c5249382548f140103353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-command-futurology-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158f275577a92ca7d58cb9a4b4c7aa49ec6dbed8cde8af11359b407b295ce232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190272 Malicious code in webdriver-mocha-ionosphere-commitlint-inflation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb8e42f1fc95776d13ca526818a5b0d2df5f8ab9b2ffb5042f1ef9273fc63ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188692 Malicious code in phylogenetics-fork-tectonic-cosmology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20cd04db7ff79d34415c4910ccf5f498e218ce9c415f6d4a1e893027ad764142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187689 Malicious code in kinetic-configstore-nuxtjs-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44184ccb146fc77b323b6e19c51c70a173fe426776802cee54b2452ea63418f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186852 Malicious code in eslint-tardigrade-gammarayburst-cryonics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6ba0986e5b3fa90399d98555fce56050736ff52b31ceb2a66250e086fda217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189004 Malicious code in quantum-norma-canopus-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cc616e1c86db519ac69507809139300362341a112b7750cd00848d92ec1602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187070 Malicious code in fusion-steganography-tachyon-exobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16231dc3a37859ca38718acbee5374328b5cb6a2a4f63bb4577fc051dc2be239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189782 Malicious code in supervisor-slides-orbit-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f9dbd94f494a24ef57e9ec19ecdf8c357feea71319d53b704f455240c03183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...