Malicious code in resident-aquamarine-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c990d9fb26b1d85f36c3951b427ea6ff2b8cf570a31326196291a2761ea98cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52305

Malicious code in resident-pink-impala npm...

Malicious code in resident-maroon-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc784fb99daf3641bc22f693a653dc95bb73817b95c3802e746a4006b8a91ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resident-teal-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877c65e57238dd35794a96cbe0ec2114382bc4957c7b96a81e156cc051f5903f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52302

Malicious code in resident-yellow-ant npm...

EUVD-2025-52304

Malicious code in resident-teal-marmoset npm...

Malicious code in resident-yellow-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff8c0117020f7e954bf8a61e491e651236e577857f748ed72e8ef66867073a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

China-Linked Hackers Exploit Windows Shortcut Flaw to Target European Diplomats

A China-affiliated threat actor known as UNC6384 has been linked to a fresh set of attacks exploiting an unpatched Windows shortcut vulnerability to target European diplomatic and government entities between September and October 2025. The activity targeted diplomatic organizations in Hungary,...

EUVD-2009-4169

Malware in sbrugna...

EUVD-2024-22543

Malicious code in bioql PyPI...

EUVD-2022-37057

Malicious code in bioql PyPI...

EUVD-2022-51119

Malicious code in bioql PyPI...

EUVD-2024-22545

Malicious code in bioql PyPI...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from userfaultfdmove and swap cache contention resulting in a corrupted RSS counter...

CVE-2024-25208

Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the Add Resident function at /barangay-population-monitoring-system/masterlist.php. This vulnerabiity allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-25209

Barangay Population Monitoring System 1.0 was discovered to contain a SQL injection vulnerability via the resident parameter at /endpoint/delete-resident.php...

CVE-2024-25207

Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the Add Resident function at /barangay-population-monitoring-system/masterlist.php. This vulnerabiity allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2022-34024

Barangay Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the resident module editing function at /bmis/pages/resident/resident.php...

NSIS Abuse and sRDI Shellcode: Anatomy of the Winos 4.0 Campaign

Co-authored byAnna Širokova and Ivan Feigl Executive summary Rapid7 has been tracking a malware campaign that uses fake software installers disguised as popular apps like VPN and QQBrowser—to deliver Winos v4.0, a hard-to-detect malware that runs entirely in memory and gives attackers remote...

Huawei HarmonyOS Process Residency Vulnerability

Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from a process-resident vulnerability. No details of the vulnerability are available at this time...