MAL-2025-52587 Malicious code in utomo-nasicampur93-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9e459830aec03378344d25457907f6eab0b531193f2882d7fb8851de4773b5 The package utomo-nasicampur93-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50974 Malicious code in bayu-lutis72-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff199ad4362511d917e70eed128b4b31c25ecbc16f788970ee80739ab9971ed The package bayu-lutis72-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51710 Malicious code in erick-ketan17-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14dd4dbb400563b36546d0810b92d74e1c50130591ff9073e0d3e30e3cb46afc The package erick-ketan17-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50726 Malicious code in wibowo-wajit87-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c0a5f2cd025cc9eda8eb80c97f3bdcda3199882b8a8ed01be9142246db6eaa The package wibowo-wajit87-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

GHSA-4W26-8P97-F4JP AugAssign evaluation order causing OOB write within the object in Vyper

Vyper handles AugAssign statements by first caching the target location to avoid double evaluation. However, in the case when target is an access to a DynArray and the rhs modifies the array, the cached target will evaluate first, and the bounds check will not be re-evaluated during the write...

PT-2024-5335

Name of the Vulnerable Software and Affected Versions Rockwell Automation 1756-EN4TR, 1756-EN2T Series A/B/C, 1756-EN2F Series A/B, 1756-EN2TR Series A/B, 1756-EN3TR Series B, 1756-EN2T Series D, 1756-EN2F Series C, 1756-EN2TR Series C, 1756-EN3TR Series B, 1756-EN2TP Series A Description A...

Malicious code in flexssl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 03236867334bb1faf1e018f54b89046a0edf300be0152c00bf921dadaee600b0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Doenerium - Fully Undetected Grabber (Grabs Wallets, Passwords, Cookies, Modifies Discord Client Etc.)

Fully Undetected Grabber Grabs Wallets, Passwords, Cookies, Modifies Discord Client Etc. Features Stealer Discord Token Discord Info - Username, Phone number, Email, Billing, Nitro Status & Backup Codes Discord Friends with rare badges Grabs crypto wallets Zcash Armory Bytecoin Jaxx Exodus Ethere...

CVE-2016-8320

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 12.0.0 and 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access...