br.com.arsmachina:tapestry-url-rewriter (>=1.0.1 <=2.0.0), br.net.woodstock.rockframework:rockframework-web (>=1.2.1 <=1.2.2) +294 more potentially affected by CVE-2026-43515 via org.apache.tomcat:catalina (>=6.0.13 <=6.0.53)

org.apache.tomcat:catalina MAVEN version =6.0.13, =1.0.1, =1.2.1, =0.1, =7.12.0, =1.0.0, =1.0.3, =9.0.3, =9.0.3, =0.7.1, =1.5, =1.8.2, =0.9.0, =1.0.0 and more Source cves: CVE-2026-43515 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-16690891...

mule-sftest

No d...

The democratisation of business email compromise fraud

Welcome to this week's edition of the Threat Source newsletter. Last weekend, I witnessed a crime. Not a notable crime that you might read about in the press, but an unremarkable fraud attempt that nevertheless illustrates how new threat actor capabilities are emerging. I imagine that most people...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql-13 (UTSA-2026-005349)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005349 advisory. Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral, PQescapeIdentifier, PQescapeString, and PQescapeStringConn allows a database...

MAL-2025-138964 Malicious code in rapid-turquoise-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f200365c9f71994dbc02253eea8ba63182e43b73b5ffa0c9fbd44cd1b34364fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117485

Malicious code in coherent-plum-mule npm...

Malicious code in ministerial-bronze-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b03000789c13c9810467f5e34f6dadc2704b04479636dad575ac93802b95d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117138

Malicious code in rapid-turquoise-mule npm...

MAL-2025-138617 Malicious code in coherent-plum-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd3afcc2ff804bfa4ed47fd1487ca51e44b193c1716b4ec7a6c4c8253d31230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117228

Malicious code in ministerial-bronze-mule npm...

EUVD-2025-117250

Malicious code in magnetic-coral-mule npm...

Malicious code in neighbouring_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7158886e082d135fa3117626d3986efbd8489f239cf26255585648208ba8cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in identical_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287bf705839d362cc65f5f5b53a024d39eb0f305d4b9253342d692953aa9c369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102707

Malicious code in realmulez3n npm...

EUVD-2025-95256

Malicious code in rottenmulez3n npm...

EUVD-2025-105764

Malicious code in distantmulez3n npm...

MAL-2025-123044 Malicious code in rotten_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c729ab4da6c638ef41cf8cf36c7b84dce82a7f7454c5f46c45924e560b07062c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distant_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521e40d437ef5951da14d09288f51bd5cd68b5ca6f0dba280f645101632b2b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-91897

Malicious code in finalmulez3n npm...

Malicious code in daily_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2908daa6c87816c274ebc40825b5130e114da8d045d7a6d344caeadbc14e8fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...