Malicious code in uaragifa-ma-sfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ce72cb833aa70a4e533f84cddf331ff853fc05a8443952a6c3f25cab5f7eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147272

Malicious code in uaragifa-ma-sayuuf npm...

EUVD-2025-147278

Malicious code in uaragifa-ma-safurt npm...

Malicious code in uaragifa-ma-sauuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca8bfb9c48532d86ec4c14b1e631556f67952a4f222d95c1df5a61c4eef900fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160149 Malicious code in masako-ma-gunung (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c92d3a1b6ff70d760bec5f53ba28bb087419227a7503120d75b0f9e6d13af4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147273

Malicious code in uaragifa-ma-sayugauf npm...

EUVD-2025-147280

Malicious code in uaragifa-ma-safufrat npm...

EUVD-2025-147282

Malicious code in uaragifa-ma-saf npm...

Malicious code in ma-rasaaya-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb38a83e5a36ceb61bf8cebbdb056ebf8e0d4000d123a3c28b6d0c6331ad6e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147275

Malicious code in uaragifa-ma-sauuf npm...

Malicious code in masako-ma-gunung (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c92d3a1b6ff70d760bec5f53ba28bb087419227a7503120d75b0f9e6d13af4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147274

Malicious code in uaragifa-ma-sayuauf npm...

EUVD-2025-147277

Malicious code in uaragifa-ma-safut npm...

EUVD-2025-147276

Malicious code in uaragifa-ma-sauf npm...

EUVD-2025-147271

Malicious code in uaragifa-ma-sf npm...

Malicious code in uaragifa-ma-sauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5625c58980a472828dc235d7a7df22fcee1b31a66c4c83c54b79a4dab18aec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Multiple vulnerabilities in Century Systems FutureNet MA and IP-K series

Overview FutureNet MA and IP-K series provided by Century Systems Co., Ltd. contain multiple vulnerabilities listed below. OS command Injection CWE-78 - CVE-2025-54763 Files or directories acessible to external parties CWE-552 - CVE-2025-58152 Chuya Hayakawa of 00One, Inc. reported these...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: mapletree: Fixed the MASTATEPREALLOC flag in maspreallocate. The preallocation flag is temporarily cleared when explicit requests for allocations are made. Existing allocations are already counted against the request through...

CVE-2025-58152

FutureNet MA and IP-K series provided by Century Systems Co., Ltd. put the firmware version and the garbage collection information on the internal web page. With some crafted HTTP request, they can be accessed without authentication...

CVE-2025-54763

FutureNet MA and IP-K series provided by Century Systems Co., Ltd. contain an OS command Injection vulnerability. A user who logs in to the Web UI of the product may execute an arbitrary OS command...