CVE-2025-63292

Freebox v5 HD firmware = 1.7.20, Freebox v5 Crystal firmware = 1.7.20, Freebox v6 Révolution r1–r3 firmware = 4.7.x, Freebox Mini 4K firmware = 4.7.x, and Freebox One firmware = 4.7.x were discovered to expose subscribers' IMSI identifiers in plaintext during the initial phase of EAP-SIM...

CVE-2025-63292

Freebox v5 HD firmware = 1.7.20, Freebox v5 Crystal firmware = 1.7.20, Freebox v6 Révolution r1–r3 firmware = 4.7.x, Freebox Mini 4K firmware = 4.7.x, and Freebox One firmware = 4.7.x were discovered to expose subscribers' IMSI identifiers in plaintext during the initial phase of EAP-SIM...

CVE-2025-13131

A vulnerability was found in Sonarr 4.0.15.2940. The impacted element is an unknown function of the file C:\ProgramData\Sonarr\bin\Sonarr.Console.exe of the component Service. Performing manipulation results in incorrect default permissions. The attack is only possible with local access. The vend...

EUVD-2025-180536

A vulnerability was found in Sonarr 4.0.15.2940. The impacted element is an unknown function of the file C:\ProgramData\Sonarr\bin\Sonarr.Console.exe of the component Service. Performing manipulation results in incorrect default permissions. The attack is only possible with local access. The vend...

EUVD-2025-117168

Malicious code in planned-turquoise-fish npm...

EUVD-2025-95783

Malicious code in plannedspiderz3n npm...

MAL-2025-122515 Malicious code in planned_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975f8cfb2882fc4dc20d806dbe32db67d31ef7ebce674886b705f21b719803fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116403 Malicious code in planned_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22a8658441265b53a3533bd5f3a11c3b4f6eebdfe02ac84d80ea3d28c20544f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116405 Malicious code in planned_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da541eba992d22ef2021a1032db2ccce6cfb05ac78bc8fa458f8b22dbb9ad51a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-89480

Malicious code in plannedllamaz3n npm...

EUVD-2025-89481

Malicious code in plannedlionz3n npm...

EUVD-2025-78609

Malicious code in plannedtarantulaz3n npm...

Malicious code in planned_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 626b45b7b2dcf11784579c37643221eaf998db20d114089d4dfa68d65a9d4d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80933

Malicious code in plannedwhitefishreplicateautomation npm...

Malicious code in planned_whitefish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65c54d1b670f9d5a0799c1ac625d7cdb20b77dfd7de4ea5e2fa6eb48448d933 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-68532

Malicious code in plannedduckz3n npm...

EUVD-2025-68533

Malicious code in plannedcheetahz3n npm...

MAL-2025-107096 Malicious code in planned_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8288fc9cef655cb3b7a121b5346eaf6c856b705ac81e8a9bc3ddb8f436891d75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107097 Malicious code in planned_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5207ad43d05ef1538f0a00a28110d29f0ed668181ad3d546633dd6cde060b28f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-62652

Malicious code in plannedcatfishz3n npm...