CVE-2025-44018

CVE-2025-44018 affects the GL.iNet GL-AXT1800 OTA Update mechanism (firmware 4.7.0). A specially crafted .tar enables a firmware downgrade, which a motivated attacker could trigger via a man‑in‑the‑middle scenario. Cisco Talos documents the vulnerable version (GL-AXT1800 4.7.0) and assigns CVSS v...

GL-Inet GL-AXT1800 OTA Update firmware downgrade vulnerability

Talos Vulnerability Report TALOS-2025-2230 GL-Inet GL-AXT1800 OTA Update firmware downgrade vulnerability November 24, 2025 CVE Number CVE-2025-44018 SUMMARY A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can le...

Malicious code in gifa-ota-uofigapfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6abf70c440c2b374dd9d8c8c59bacd143a6c6fad642fcd667b3994650506360d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanuni-ota-umumauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e34f24762987c218dc113289e4118b917d29d68021bf35eab567ec997a83a012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanuni-ota-ufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457aaf558bcfbc095704889febcc07fa1047db928f39da89b17f3d17b1b06bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uuo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64db71fbaa5022c53a7dae997706b4c47bc166ff3871d5c0edeb377a1637782a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04373848110c411d09a032bf6ff2b51c64b8e37e084f4e2357b84d66b232ffeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155301 Malicious code in gifa-ota-uofo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5b9cbda97b841e81066c7f7eae4517cfaeb6fe108309a5f616fa5e10e2cbc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155856 Malicious code in ibanun-ota-umu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea1e7d5932d7d570480cb1b686d8a4e4594690f59efb3d56a611e2b44194c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155291 Malicious code in gifa-ota-uo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cefc86278bd4b2833be8a9a66f22a0826db5a17d6f9bd4296ab429f1989329e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanun-ota-umuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9723f9332f9a685edf9ca049fc8881a1f91b57bfa6fe0d58534109b46ad6878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanuni-ota-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0780c45f6044e46b6315b4ca455aa32fe4483d2b701785daf14945b1b3e01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uofo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5b9cbda97b841e81066c7f7eae4517cfaeb6fe108309a5f616fa5e10e2cbc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanun-ota-umabtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57cf1a09899944e51f6326119944db5b1922da38f0f41755337907ad81c8c254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155864 Malicious code in ibanuni-ota-uauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a88c76c93c0b40b818cf30e05ca7db2f80587fcefd623fe2b6dacf9f2983776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155295 Malicious code in gifa-ota-uofigafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daed5ef28fb11d9e25a4410df9f457b419e8d75d9d3f373cd16228cbf7d0ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155298 Malicious code in gifa-ota-uofigapfto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563ed43ed6a95942629b214a85778bb19bafa3d75a2e4edd22570780ad88e349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanun-ota-umum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5028664e649a54c6e92febed23d5a6243e1d6aaf95dd42a5836d2f5a7e19899a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uofigapfto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563ed43ed6a95942629b214a85778bb19bafa3d75a2e4edd22570780ad88e349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155290 Malicious code in gifa-ota-uauafdfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39dc4e206f8c760992513e318679f0cecf09e38a6c498bf71a3942107ade9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...