Malicious code in gita-nasi6-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394fe42d2ccb2dd6bc1eb4d01703e71b0a001bb724768146f8ab399288dd219b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-sasag72-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d62a19217ff83497280a3d8017b20dcbef31aea31ba6b306d9b6b907f655df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-sambel11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c761d9685de45d33475e54aab63775c0167089732c34f0c4a80eff79a9f200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-gandul70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb24b5ac409cadcc5353d25e8921d87f3408f6bf5328b43dcd013c269173116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1afdfdbfde15f5dbfd99db3941532b5586b5a7a293d3650aad9730b040af39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

NVIDIA Triton Inference Server 安全漏洞

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. A security vulnerability exists in NVIDIA Triton Inference Server that stems from an attacker sending an oversized payload could lead to a...

PT-2025-46377

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server for Linux and Windows affected versions not specified Description The NVIDIA Triton Inference Server is susceptible to a stack overflow condition triggered by the reception of excessively large payloads...

UBUNTU-CVE-2025-61261

A reflected cross-site scripting XSS vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

Malicious Package

Overview Sharp7Extend is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Malicious Package

Overview SqlLiteRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 a...

Malicious Package

Overview MyDbRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Malicious Package

Overview SqlUnicornCoreTest is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023...

Malicious Package

Overview SqlDbRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Malicious Package

Overview SqlUnicorn.Core is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Malicious Package

Overview MCDbRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Malicious Package

Overview SqlRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Malicious Package

Overview SqlUnicornCore is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Hidden Logic Bombs in Malware-Laced NuGet Packages Set to Detonate Years After Installation

A set of nine malicious NuGet packages has been identified as capable of dropping time-delayed payloads to sabotage database operations and corrupt industrial control systems. According to software supply chain security company Socket, the packages were published in 2023 and 2024 by a user named...

PT-2025-45157

Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description A reflected cross-site scripting XSS issue exists in the authentication endpoints of WSO2 products because of insufficient output encoding. An attacker can inject JavaScript payloads in...

CVE-2025-54329

The CVE-2025-54329 issue affects Samsung Exynos devices (Samsung Mobile Processor, Wearable Processor, and Modems such as 5123/5300/5400 and related W-series) where a NAS function that handles multiple-payload messages (including SMS) does not properly validate input size. This bounds-checking fl...