644 matches found
CVE-2022-35884
Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted HTTP request can lead to memory corruption, information disclosure and denial of service. An attacke...
EUVD-2025-178350
Malicious code in iota-analyze-transpile-iota-abstract npm...
EUVD-2025-178824
Malicious code in function-iota-sanitize-view-old npm...
Malicious code in cressida-cache-iota-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdc68100f25ab316f603e943cc9672495c31169a3534af578cd94b80cb0b020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176941
Malicious code in public-bundle-class-iota-thread npm...
Malicious code in arcturus-centauri-iota-puppeteer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b062fbcc4e77a805c34328bb8e4095c779c20a7fe585cf258b619b7029d33cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177248
Malicious code in perseus-tectonophysics-iota-xenobiology npm...
Malicious code in arcturus-iota-auth-blaze (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344a134db153287fc48bcaa7911fb098e3e8419e1acff1237db92b1b6b1c68f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179527
Malicious code in cosmology-levels-terser-iota npm...
EUVD-2025-178262
Malicious code in joviology-standard-iota-outercore npm...
EUVD-2025-180355
Malicious code in archaeometry-command-iota-octans npm...
EUVD-2025-177715
Malicious code in nanotechnology-eventhoriz-iota-commitizen npm...
EUVD-2025-178777
Malicious code in ganymede-meteor-equinox-iota npm...
EUVD-2025-179516
Malicious code in cressida-cache-iota-antares npm...
EUVD-2025-179366
Malicious code in deimos-iota-luminescence-geochemistry npm...
EUVD-2025-175837
Malicious code in umbra-iota-graphql-callback npm...
EUVD-2025-176938
Malicious code in public-final-iota-upsilon-array npm...
EUVD-2025-176216
Malicious code in start-iota-webpack-cli npm...
Malicious code in antares-iota-mysql-start (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b745a215730f800ab23e41a575eb14af8482a22bb5b1a6db13350db681a93e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...