MAL-2025-79931 Malicious code in massive_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6236de2e9c5035e1106c258c77ef400d0807ba673a8e141e617146545043c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53323

Malicious code in massive-magenta-python npm...

EUVD-2025-53322

Malicious code in massive-salmon-baboon npm...

EUVD-2025-53324

Malicious code in massive-lavender-rattlesnake npm...

Malicious code in massive-salmon-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3246680bbd074dc58285a221f35e5d20727fd2ba14b9f06103a2ed14592e824b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-46413

Malicious code in massivecatsharkz3n npm...

Malicious code in dewi-nasipecel30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfb339c9e58502fa9c01e8dd5a4d7a8ef84e86a8625d78ea069a55ed78266ac The package dewi-nasipecel30-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

CVE-2025-61303

The RecordedFuture Triage cloud sandboxing service (specifically the Windows behavioral analysis engine ) is vulnerable to uncontrolled resource consumption in Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021 (2025-08-14) . A malicious sample can recursively spawn a large number of chi...

EUVD-2007-5347

Malware in sbrugna...

Pilot Contamination Attacks Detection with Machine Learning for Multi-User Massive MIMO

Massive multiple-input multiple-output MMIMO is essential to modern wireless communication systems, like 5G and 6G, but it is vulnerable to active eavesdropping attacks. One type of such attack is the pilot contamination attack PCA, where a malicious user copies pilot signals from an authentic us...

EUVD-2025-7717

Malicious code in bioql PyPI...

curl: int overflow in krb5_read_data() leads to (possible) massive `recv()` write

Summary: Note: AI created the PoC, not the report. In the krb5readdata function here, there are two issues one of which I am very surprised hasn't been caught before. Issue 1 is that this block can result in an int overflow, where the following check becomes invalid if the value is wrapped to a...

Why Observability Tools Tend to Fail at Scale

Observability is no longer just about catching errors or checking if a server is up. In modern distributed systems, it’s about understanding behavior across dozens, if not thousands, of services, all running in different environments and generating massive amounts of data...

MAL-2025-191764 Malicious code in imad213tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2cddffd96538ab03979aa6404e3c946258e49677220c4820f3a8f0972b31cb17 Encrypted code offering massive sending Instagram followers. 1 besides of using some shady services to achieve the goal, it also exfiltrates saved Instagram...

CVE-2025-26916

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Pixflow Massive Dynamic massive-dynamic.This issue affects Massive Dynamic: from n/a through = 8.2...

CVE-2025-26916

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Pixflow Massive Dynamic massive-dynamic.This issue affects Massive Dynamic: from n/a through = 8.2...

CVE-2025-26916 WordPress Massive Dynamic theme <= 8.2 - Unauthenticated Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Pixflow Massive Dynamic massive-dynamic.This issue affects Massive Dynamic: from n/a through = 8.2...

CVE-2025-26916

CVE-2025-26916 corresponds to an Unauthenticated Local File Inclusion in WordPress Massive Dynamic (theme) up to version 8.2. The issue is described as improper control of the filename used by PHP include/require, enabling local file inclusion via network access. Public sources in the connected d...

CVE-2025-26916 WordPress Massive Dynamic theme <= 8.2 - Unauthenticated Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Pixflow Massive Dynamic massive-dynamic.This issue affects Massive Dynamic: from n/a through = 8.2...

CVE-2025-26916: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Pixflow Massive Dynamic massive-dynamic.This issue affects Massive Dynamic: from n/a through = 8.2...