EUVD-2025-53755

Malicious code in initial-indigo-dingo npm...

EUVD-2025-53754

Malicious code in initial-purple-toad npm...

EUVD-2025-53752

Malicious code in initial-tomato-cardinal npm...

EUVD-2025-53751

Malicious code in initial-yellow-impala npm...

MAL-2025-68894 Malicious code in initial-indigo-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902c8c8f4be2199ec74693de9f9bdc8f79db3770eb30194728df45934ea0bc79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68893 Malicious code in initial-beige-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58044d381c1d0493d05ed67b8f291bd04bd3373df00463459d6a6678e1802a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in initial-yellow-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffecbd5eaa570a450f38f5a39399b8722e79d7e63e97095dbfed9adf168eeada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in initial-red-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e3c92896e161e5a58d2608703518b87af1d886e2a43d57ca1236b9ad114244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53753

Malicious code in initial-red-mandrill npm...

MAL-2025-68895 Malicious code in initial-purple-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5b9d9f5f99e721c6dd6a4832f73f6d6d4a0d8231fbd1dc72f2028d48112ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-59128

Malicious code in initialotterz3n npm...

Malicious code in initial_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1940f91dae4901da23794377633f243659eec2a20405ef736fd11bf81a539682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-44062

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete...

CVE-2025-12480

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete...

CVE-2025-12480

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete...

CVE-2025-12480

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete...

CVE-2025-12480

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete...

TrioFox 安全漏洞

TrioFox is a remote access software from TrioFox USA. A security vulnerability exists in versions prior to Triofox 16.7.10368.56560, which stems from improper access control and could result in access to the initial settings page...

VulnCheck KEV: CVE-2025-12480

Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete...

CVE-2025-12480: Improper Access Control

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete...