94 matches found
Malicious code in decrypt-simulate-socket-omicron-tree (npm)
The package decrypt-simulate-socket-omicron-tree was found to contain malicious code. --- Credit: OpenSSF source...
EUVD-2026-53921
OMICRON StationGuard before version 4.10 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate...
PT-2026-68490
Name of the Vulnerable Software and Affected Versions OMICRON StationGuard versions prior to 4.10 Description A cryptographic timing side-channel vulnerability exists in the backend authentication mechanism. This flaw allows an unauthenticated attacker to forge valid authentication credentials,...
PT-2026-68491
Name of the Vulnerable Software and Affected Versions OMICRON StationGuard version 4.00 Description Improper input validation occurs during the processing of IEC 61850 Sampled Values SV frames. A specially crafted SV frame can cause the responsible process to terminate, which disrupts the...
CVE-2026-16731: Observable Timing Discrepancy
OMICRON StationScout before version 3.05 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate...
CVE-2026-16316: Improper Input Validation
OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values SV frame processing. A specially crafted SV frame can cause the affected process to terminate, disrupting alert processing for Sampled Values traffic. The vulnerability does not affect...
CVE-2026-16315: Observable Timing Discrepancy
OMICRON StationGuard before version 4.10 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate...
PT-2026-68492
Name of the Vulnerable Software and Affected Versions OMICRON StationScout versions prior to 3.05 Description A cryptographic timing side-channel vulnerability exists in the backend authentication mechanism. This flaw allows an unauthenticated attacker to forge valid authentication credentials,...
Malicious code in fork-omicron-socket-easy-array (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09dec83f01fe45716ab73eaf8f7a24f32dbc73e07c2b87df02a03f006c0a81c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in omicron-query-air-cold-kappa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf2ab953418ed4cb1f746b6fb3179574ad14d8670dc1414ab46934e8199dd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176084
Malicious code in table-hash-long-delta-omicron npm...
EUVD-2025-177466
Malicious code in omicron-bundle-file-final-warn npm...
EUVD-2025-177465
Malicious code in omicron-enum-link-permission-double npm...
EUVD-2025-177462
Malicious code in omicron-query-air-cold-kappa npm...
EUVD-2025-177459
Malicious code in omicron-thread-report-query-book npm...
EUVD-2025-176472
Malicious code in sed-secure-rain-water-omicron npm...
EUVD-2025-176404
Malicious code in shell-omicron-dog-bash-simple npm...
EUVD-2025-176403
Malicious code in shell-process-eta-star-omicron npm...