MAL-2025-50726 Malicious code in wibowo-wajit87-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c0a5f2cd025cc9eda8eb80c97f3bdcda3199882b8a8ed01be9142246db6eaa The package wibowo-wajit87-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50377 Malicious code in fadhil-pisang20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 007d0930c3d6ec5aced0d8ef67ec997307b6656e99f696dc5afc051b1d04427b The package fadhil-pisang20-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51232 Malicious code in candra-rangginang93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42a4472fa6abc2f8837b4f8604b93bff04484e146fc196c9c715f1eb154469ce The package candra-rangginang93-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50644 Malicious code in vera-tahu100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77187e6316ef18116bd4e1bc6b9dce37834a157cd6d1802936574d8736a5a487 The package vera-tahu100-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

GHSA-4W26-8P97-F4JP AugAssign evaluation order causing OOB write within the object in Vyper

Vyper handles AugAssign statements by first caching the target location to avoid double evaluation. However, in the case when target is an access to a DynArray and the rhs modifies the array, the cached target will evaluate first, and the bounds check will not be re-evaluated during the write...

PT-2024-5335

Name of the Vulnerable Software and Affected Versions Rockwell Automation 1756-EN4TR, 1756-EN2T Series A/B/C, 1756-EN2F Series A/B, 1756-EN2TR Series A/B, 1756-EN3TR Series B, 1756-EN2T Series D, 1756-EN2F Series C, 1756-EN2TR Series C, 1756-EN3TR Series B, 1756-EN2TP Series A Description A...

Malicious code in flexssl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 03236867334bb1faf1e018f54b89046a0edf300be0152c00bf921dadaee600b0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Doenerium - Fully Undetected Grabber (Grabs Wallets, Passwords, Cookies, Modifies Discord Client Etc.)

Fully Undetected Grabber Grabs Wallets, Passwords, Cookies, Modifies Discord Client Etc. Features Stealer Discord Token Discord Info - Username, Phone number, Email, Billing, Nitro Status & Backup Codes Discord Friends with rare badges Grabs crypto wallets Zcash Armory Bytecoin Jaxx Exodus Ethere...

CVE-2016-8320

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 12.0.0 and 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access...