648 matches found
Malicious code in eclipse-zephyr-meteor-iota (npm)
Source: amazon-inspector d25f08d85561a4f9320ecd3fcb6e97c39ffd13e80b8acf7711b6112b0a8eabab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dysonswarm-gulp-dendrochronology-iota (npm)
Source: amazon-inspector df2900cd899be02f8b927b3a22067e8f4e1e87d3b8ee57a7ad44205167f4a2bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dynamo-docusaurus-iota-restart (npm)
Source: amazon-inspector 601da33a7c94325665c58104eee0e56a78539f7d9cc24487209dc90c3391df2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious Package
Overview bellatrix-spawn-iota-convict is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
CVE-2022-35884
Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted HTTP request can lead to memory corruption, information disclosure and denial of service. An attacke...
EUVD-2025-180266
Malicious code in async-iota-pavo-quasar npm...
EUVD-2025-177715
Malicious code in nanotechnology-eventhoriz-iota-commitizen npm...
EUVD-2025-178262
Malicious code in joviology-standard-iota-outercore npm...
EUVD-2025-177248
Malicious code in perseus-tectonophysics-iota-xenobiology npm...
EUVD-2025-176100
Malicious code in superposition-quasar-iota-mysql npm...
EUVD-2025-180231
Malicious code in aurora-transform-protoplanetarydisk-iota npm...
EUVD-2025-178824
Malicious code in function-iota-sanitize-view-old npm...
Malicious code in cressida-cache-iota-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdc68100f25ab316f603e943cc9672495c31169a3534af578cd94b80cb0b020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eris-slidev-iota-css-minimizer-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df597c8562db9900df55e7a3e8d03179009373f184183e35c90f96a6edfe0739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178347
Malicious code in iota-centaurus-blackhole-cosmicray npm...
EUVD-2025-177252
Malicious code in perseus-orbit-iota-aquarius npm...
Malicious code in arcturus-iota-auth-blaze (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344a134db153287fc48bcaa7911fb098e3e8419e1acff1237db92b1b6b1c68f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178777
Malicious code in ganymede-meteor-equinox-iota npm...