EUVD-2025-113924

Malicious code in eris-yildun-readable-frontend npm...

EUVD-2025-113231

Malicious code in geckodriver-readable-thuban-virgo npm...

EUVD-2025-113858

Malicious code in eslint-testcafe-readable-readable npm...

EUVD-2025-121428

Malicious code in telesto-readable-forever-winston npm...

EUVD-2025-122690

Malicious code in release-it-quantum-delphinus-readable npm...

MAL-2025-145938 Malicious code in package-luna-prettier-plugin-markdown-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75efe02b19ff9ec70cbd27c5dc3b7ff7f2efe7c12ee542ff0ba4d8f933f0cf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146119 Malicious code in perseus-tailwindcss-sagitta-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe718078873d5a61ddb4eb1d9bf6a74722c114987d641c9b5a9f4a5a7d467c0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122809

Malicious code in redis-readable-convict-odin npm...

EUVD-2025-111253

Malicious code in mensa-readable-nuxtjs-procyon npm...

EUVD-2025-122829

Malicious code in readable-thuban-init-pyxis npm...

EUVD-2025-121396

Malicious code in terser-polaris-husky-readable npm...

Malicious code in nconf-readable-wasat-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0599b1f33fa576bdb70fc7a72e764dfc3766113e5847b1a2f0ceb2cd50c5d209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147093 Malicious code in readable-thuban-init-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8733cfa1a946d8622545f8700875be755e52be1e80ab8df4d0350d62cb65bfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149041 Malicious code in ursa-apollo-version-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5eb449d68a1a78b9ec331359f8f01997194d27f618af0a73724e5259164277c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147174 Malicious code in rehype-lint-staged-electron-builder-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fb7661d97fa79becf96fd616adb271cd58835747f87115d70b43f80dede60f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-weywot-eslint-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a88c9b0d592888a18027b9fe9f06c0a29b5cf294a0a93073b116f95bcb23295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2024-32010

A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP12 Update 2. The affected application is vulnerable to extraction of database credentials via a world-readable credential file. This allows an attacker to connect to the database as privileged application user and to run...

CVE-2024-32010

A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP12 Update 2. The affected application is vulnerable to extraction of database credentials via a world-readable credential file. This allows an attacker to connect to the database as privileged application user and to run...

CVE-2024-32010

A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP12 Update 2. The affected application is vulnerable to extraction of database credentials via a world-readable credential file. This allows an attacker to connect to the database as privileged application user and to run...

PT-2025-46535

Name of the Vulnerable Software and Affected Versions Spectrum Power versions prior to 4.70 SP12 Update 2 Description The application is susceptible to the exposure of database credentials through a world-readable credential file. Successful exploitation allows an attacker to connect to the...