CVE-2022-35884

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted HTTP request can lead to memory corruption, information disclosure and denial of service. An attacke...

EUVD-2025-177289

Malicious code in pegasus-deneb-iota-mira npm...

EUVD-2025-177607

Malicious code in nightmare-mesosphere-iota-dotenv npm...

EUVD-2025-178339

Malicious code in iota-report-phi-good-public npm...

EUVD-2025-179746

Malicious code in chi-iota-decompress-sed-emulate npm...

EUVD-2025-178346

Malicious code in iota-framework-umbra-uranology npm...

MAL-2025-188275 Malicious code in nightmare-mesosphere-iota-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2277b8efd1d670698357ef4928cfdeebcbaf96d247814a668af92fe7f157f8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180344

Malicious code in arcturus-iota-auth-blaze npm...

EUVD-2025-177252

Malicious code in perseus-orbit-iota-aquarius npm...

Malicious code in nightmare-mesosphere-iota-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2277b8efd1d670698357ef4928cfdeebcbaf96d247814a668af92fe7f157f8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179024

Malicious code in ethology-iota-neuromorphic-neptune npm...

EUVD-2025-178698

Malicious code in global-polaris-spica-iota npm...

EUVD-2025-178341

Malicious code in iota-levels-foundation-solis npm...

EUVD-2025-176592

Malicious code in root-user-await-validate-iota npm...

EUVD-2025-179812

Malicious code in ceres-augmentedreality-iota-transport npm...

EUVD-2025-179223

Malicious code in dysonswarm-gulp-dendrochronology-iota npm...

Malicious code in transpile-new-cache-iota-quick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5f768de28debbd6b75b7ca7af27a0d76a8d2e252a57dd227893aeb559ff981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-iota-graphql-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0216011a857c745443a164b8b961b2825a42498fd66c95b1ea56899885b894bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-meteor-equinox-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6caf727d2ca931162dc42199e8135f7c9bc25580dc02019ae90f6876bc9655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-iota-auth-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344a134db153287fc48bcaa7911fb098e3e8419e1acff1237db92b1b6b1c68f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...