CVE-2026-5504 PKCS7 CBC Padding Oracle — Plaintext Recovery

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated...

France Arrests 22 Year Old After Hack of Interior Ministry Systems

France confirms a cyberattack on its Interior Ministry as a 22-year-old is arrested. Hacker claims access to police, tax, and criminal record systems...

Malicious code in interior_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f4a0da19a02ce09191d24fc0f6c82a3e21eb0dc7a4d2ec0172ee3d0dcac20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134373 Malicious code in interior_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe18436f3821f2cbd20cd2d8b857a229886bbc2eced26c83c2c85ad9e4560ab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114831 Malicious code in interior_gibbon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5cd32f3a0db63a8886d0092142ea857b9fe5106e2049c9c64ac2082f2920aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-91052

Malicious code in interiorpeafowlz3n npm...

Malicious code in interior_lion_gold-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae26f320bfbaca27176c41197adcbf049ea61de8a51d79a1576a92213b23343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74520

Malicious code in interiorcuckoored-43 npm...

EUVD-2025-78971

Malicious code in interiorgopherz3n npm...

Malicious code in interior_sparrow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3a4690de2f64c636bf90d05b622dee5abdfa480d2e92a8d8616012e76a53b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81511

Malicious code in interiormanateedumbs npm...

EUVD-2025-81512

Malicious code in interiorechidnadumbs npm...

MAL-2025-104339 Malicious code in interior_mockingbird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70af989d64071fee0e7d288e249f62a2b34c2b4d81230b9e0bf77d4680ce6538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63458

Malicious code in interiorwolfz3n npm...

EUVD-2025-63461

Malicious code in interiormitez3n npm...

EUVD-2025-63459

Malicious code in interiortiglonrequirement npm...

EUVD-2025-63460

Malicious code in interiormolluskz3n npm...

MAL-2025-95092 Malicious code in interior_emu_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338f2b0f47d59737850ad926de1860a72a00a9ef770e222a77e6e645aa4ac368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interior_tiglon_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 757a46f807353c3fb38c7b1fc80bd34eb1178f57a99cf0e6db5593c3bacf6e61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86747 Malicious code in interior_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f58651946f5fb8d7a385294f8cf6693437f0c529b6a94382d4e1f95de46443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...