Coder 日志信息泄露漏洞

Coder is an application from Coder Inc. that can set up development environments in public or private cloud infrastructures. A log information disclosure vulnerability exists in Coder versions 2.26.5, 2.27.7, and prior to 2.28.4, which stems from workspace agent manifests logging sensitive values...

PT-2025-48989

Name of the Vulnerable Software and Affected Versions Coder versions prior to 2.26.5 Coder versions prior to 2.27.7 Coder versions prior to 2.28.4 Description Coder enables organizations to set up remote development environments using Terraform. Before versions 2.26.5, 2.27.7, and 2.28.4, Workspa...

CVE-2025-63433

Xtooltech Xtool AnyScan Android Application 4.40.40 and prior uses a hardcoded cryptographic key and IV to decrypt update metadata. The key is stored as a static value within the application's code. An attacker with the ability to intercept network traffic can use this hardcoded key to decrypt,...

CVE-2025-34324

GoSign Desktop

Kubernetes: Node Detection

Detection of the Kubernetes node type SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.137000";...

MAL-2025-187320 Malicious code in helios-webdriver-mocha-superposition-phylogenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa52991d1dbcd2f6889af5503b80d384df7b867c03de23959b38644f8ce0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kugfi-comolai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14d981e3bf0c01664a1f1ebcb70106b6d63d126937160d1725977cb8eec61ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177427 Malicious code in poglymer-ogminamh-abaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc765a9f46c60a5f3cec05c1bff511ba8b018c705b11a9906485c4bbb58ac53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171136 Malicious code in eimearobrien (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec779ca800ab1240e0639454e07958720575e4de5269ddc892aae569f84619a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in franciscosouza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d825ceb7b84621861c63bc3e8fe67c329c4510d9516113af595a1e8e6b042dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171534 Malicious code in maevekelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376373d830b5b9c73f83e3fc78016edcc3c8c40456c4c8426452dc89a5af5a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albio-tolanban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912b972232ae107fcd9acdc2540103e2ee7f18344ae69588ea9976d5fc0d57b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f328c67bca3b3029d0f1cafeeafdb11f65ad7a12284137ac6c3b21c41ec0bbd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163284 Malicious code in nokire-nanali31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 578c3f8ae8469790cca5d2bb4b4eb2816ba99e2bcc3a7a2d0034352c4c7a191e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134514 Malicious code in iwan-tempe79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44476910f9f78c1fb973c00fe888998a68ac2e28f6b669d3e827f47f27cc5495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128357 Malicious code in lutfi-esdoger93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24e1429522bd3a9f2b983235b72f3386823c7d3914293cee029ac8834a11395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121673 Malicious code in mahesa-ketoprak45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3005216fdd827cc93e144a7a32245ae8cd38e90088ea8f0b26aff1d8e5e85cf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2fecdc1c338a99b988cd5a18790290edb36f78685837e44f77ce1184f6a176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-lapis71-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2491c8caafae79e76af771811028e0d5a26b92059828e12ab55bf2f580513e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-wajit24-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa13fbce501219ea1f699cfcf88b8e13a628ba629abeaa2124a9229874792f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...