Malicious code in uinsnu-lotaizmi-kulaksimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f814632638384ae48fd50a1eb490db70fa5d9b9651f4ce9fc09ca3eb27b504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152153 Malicious code in akabia-aliguamafi-agoubuva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a44d16e0cf5035cdd18926eaf66979b958b56fdc49123db5eeb86ecd066f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127278 Malicious code in ida-ketoprak2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e42b21831eb9654b711312a96ce8f22a604f72c67eedd5b73feb184920b7534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93535

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large payloads. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-33202

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large payloads. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-33202

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large payloads. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-33202

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large payloads. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-33202

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large payloads. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-33202

NVIDIA Triton Inference Server (Linux/Windows) is affected by CVE-2025-33202, a stack overflow triggered by extra-large payloads that can lead to denial of service. Public docs detail a network-exploitable flaw (CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) with base score 6.5. NVIDIA’s advisor...

Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers

Cybersecurity researchers have disclosed details of a new Android remote access trojan RAT called Fantasy Hub that's sold on Russian-speaking Telegram channels under a Malware-as-a-Service MaaS model. According to its seller, the malware enables device control and espionage, allowing threat actor...

EUVD-2025-74048

The WP Go Maps formerly WP Google Maps WordPress plugin before 9.0.48 does not sanitize user input provided via an AJAX action, allowing unauthenticated users to store XSS payloads which are later retrieved from another AJAX call and output unescaped...

MAL-2025-85756 Malicious code in galih-lumpur2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dffd18a9671feb3fa0cd12c0e135d91a0d6745c7059a59ce86fc04c4f2709dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-nasi6-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394fe42d2ccb2dd6bc1eb4d01703e71b0a001bb724768146f8ab399288dd219b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-sasag72-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d62a19217ff83497280a3d8017b20dcbef31aea31ba6b306d9b6b907f655df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-sambel11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c761d9685de45d33475e54aab63775c0167089732c34f0c4a80eff79a9f200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-gandul70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb24b5ac409cadcc5353d25e8921d87f3408f6bf5328b43dcd013c269173116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1afdfdbfde15f5dbfd99db3941532b5586b5a7a293d3650aad9730b040af39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

NVIDIA Triton Inference Server 安全漏洞

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. A security vulnerability exists in NVIDIA Triton Inference Server that stems from an attacker sending an oversized payload could lead to a...

PT-2025-46377

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server for Linux and Windows affected versions not specified Description The NVIDIA Triton Inference Server is susceptible to a stack overflow condition triggered by the reception of excessively large payloads...

UBUNTU-CVE-2025-61261

A reflected cross-site scripting XSS vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...