303 matches found
Malicious code in gita-lapis50-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210f11a47a17c8f020e2ed994b9e4c28a34c713ae41d5f4f5425fd26622abe55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-90228 Malicious code in rival_anaconda_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670dc34a89a2e908c5d3c71b12b6cea9da418b1874857582c89c244d69a09947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-78088 Malicious code in fajar-botok61-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7bbdd30ee39202f5e2ec0ea1f47cb006f2609d912e02c8e0b16d476339f2d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-71724 Malicious code in yelping-violet-puma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0adaea808eeefa40d8a49244b4e3fd655bde5cf70dc9a02bd2e6a8f66546d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in present_cobra_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420c75d2215acf6be902987e70981118a70f5fb3a53a412f602bafb2d5330d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in tuti-sate26-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca99b96ae947a6b6c72cac00cf92d344279b0e0632f4301a9c05b51a202e1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-56988 Malicious code in jaja-sego85-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66295109b74a19a611ddecdd489493f3bbf504828392d49bbe9a1e345957bf04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-50324 Malicious code in erick-klentik99-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031df8a5d41c30d389671e0acc91e3bd993807c3c4568e643739fc4392ab56c7 The package erick-klentik99-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...
MAL-2025-52482 Malicious code in tuti-botok9-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5856b17c87fc2cd53def56fa62cdc70fd5e86d08b2757973fe20c271f9d0a016 The package tuti-botok9-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
MAL-2025-51678 Malicious code in eko-lepet54-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba52775a0f40c515b1d31dfbc714b254055342775ccd50a4e6420a0cdff0c648 The package eko-lepet54-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
CVE-2025-53880
A Path Traversal vulnerability in the tftpsync/add and tftpsync/delete scripts allows a remote attacker on an adjacent network to write or delete files on the filesystem with the privileges of the unprivileged wwwrun user. Although the endpoint is unauthenticated, access is restricted to a list o...
CVE-2025-3356
IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view, overwrite, or append to arbitrary files on the system...
CVE-2025-61941
A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered by an administrative user who logs in to the affected product. Moreover, arbitrary OS command may be executed via some file alteration...
EUVD-2008-1571
Malware in sbrugna...
EUVD-1999-0086
Malware in sbrugna...
EUVD-2012-0724
Malware in sbrugna...
EUVD-2012-3456
Malware in sbrugna...
EUVD-1999-0742
Malware in sbrugna...