686 matches found
Malicious Package
Overview bellatrix-spawn-iota-convict is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
CVE-2022-35884
Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted HTTP request can lead to memory corruption, information disclosure and denial of service. An attacke...
EUVD-2025-175837
Malicious code in umbra-iota-graphql-callback npm...
EUVD-2025-178262
Malicious code in joviology-standard-iota-outercore npm...
EUVD-2025-180355
Malicious code in archaeometry-command-iota-octans npm...
EUVD-2025-179516
Malicious code in cressida-cache-iota-antares npm...
EUVD-2025-178334
Malicious code in iota-virtualize-alert-mu-cache npm...
EUVD-2025-176854
Malicious code in quark-iota-paleoclimatology-enif npm...
EUVD-2025-179366
Malicious code in deimos-iota-luminescence-geochemistry npm...
EUVD-2025-178777
Malicious code in ganymede-meteor-equinox-iota npm...
EUVD-2025-176100
Malicious code in superposition-quasar-iota-mysql npm...
Malicious code in arcturus-centauri-iota-puppeteer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b062fbcc4e77a805c34328bb8e4095c779c20a7fe585cf258b619b7029d33cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176941
Malicious code in public-bundle-class-iota-thread npm...
EUVD-2025-177715
Malicious code in nanotechnology-eventhoriz-iota-commitizen npm...
Malicious code in analyze-abstract-hash-code-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94747fbea6244359c0e5f32c8af9461dfd765fc51d10bca1d94dd3e3f0cef6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178351
Malicious code in iota-aether-hawkingradiation-augmentedreality npm...
EUVD-2025-178350
Malicious code in iota-analyze-transpile-iota-abstract npm...
EUVD-2025-180231
Malicious code in aurora-transform-protoplanetarydisk-iota npm...