814 matches found
Badges, Bytes and Blackmail
Behind the scenes of law enforcement in cyber: what do we know about caught cybercriminals? What brought them in, where do they come from and what was their function in the crimescape? Introduction: One view on the scattered fight against cybercrime The growing sophistication and diversification ...
CVE-2018-18375
goform/getProfileList in Orange AirBox Y858FL01.1604 allows attackers to extract APN data name, number, username, and password via the rand parameter...
CVE-2018-18377
goform/setReset on Orange AirBox Y858FL01.1604 devices allows attackers to reset a router to factory settings, which can be used to login using the default admin:admin credentials...
EUVD-2025-117149
Malicious code in puny-orange-baboon npm...
EUVD-2025-117460
Malicious code in curved-orange-thrush npm...
EUVD-2025-117216
Malicious code in nasty-orange-frog npm...
EUVD-2025-117339
Malicious code in grotesque-orange-junglefowl npm...
EUVD-2025-117323
Malicious code in holy-orange-lynx npm...
EUVD-2025-117417
Malicious code in electrical-orange-duck npm...
MAL-2025-138779 Malicious code in holy-orange-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96b7228f85fdaae76010c05d469e84496256f1050173941e932fa7bc2926359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-138763 Malicious code in grotesque-orange-junglefowl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa6ab74ab7d8e00ba82151c88cd9af57b2afdc6fe6f0e2aa0e17c14e037533f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in grotesque-orange-junglefowl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa6ab74ab7d8e00ba82151c88cd9af57b2afdc6fe6f0e2aa0e17c14e037533f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in curved-orange-thrush (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ef8856f41d66e8d2bfd6b417060f717f920ce163201c6db6b71acdd9ab6f04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in puny-orange-baboon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a798765f26efb93ff4f1d23a03cb7fb342a0454a0f988b24750d8f121afd174f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117177
Malicious code in parental-orange-lion npm...
EUVD-2025-117444
Malicious code in difficult-orange-dove npm...
MAL-2025-138953 Malicious code in puny-orange-baboon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a798765f26efb93ff4f1d23a03cb7fb342a0454a0f988b24750d8f121afd174f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-138685 Malicious code in electrical-orange-duck (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44d82b614e64e0f96c58167da3c1f3037dac79370f7c384d319bdf588caa485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in aware_butterfly_orange-61 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d7c2a8d987e7065540c2e808630b3a40d1e0d672dec8f2e7c1710c8b29c6af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...