EUVD-2025-52694

Malicious code in practical-olive-roadrunner npm...

EUVD-2025-60785

Malicious code in amateurroadrunnerz3n npm...

MAL-2025-61853 Malicious code in amateur_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7059ca7c824b4f6a3a6951a4957562ce7af1db38b700d5893b84f2996ff510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56508

Malicious code in weeklyroadrunnerz3n npm...

MAL-2025-66132 Malicious code in weekly_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d206972bcd5fbbcde774b31415a35340d6fdefc93adce408159c9b507999de07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retired_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9164c98cf0b7f0cfc9fe26fad02be77c013332f3f8b4cc4e2a330ec935e5d534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49525

Malicious code in rationalroadrunnerz3n npm...

EUVD-2025-49377

Malicious code in skilledroadrunnerz3n npm...

EUVD-2025-50219

Malicious code in fancyroadrunnerz3n npm...

EUVD-2025-50496

Malicious code in contemporaryroadrunnerz3n npm...

EUVD-2025-49620

Malicious code in possibleroadrunnerz3n npm...

EUVD-2025-50242

Malicious code in explicitroadrunnerz3n npm...

Malicious code in rational_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e68681b9e0c14fa6e3dd6c86786d20b70f932d4e428ab5b0ad0099038ce42474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-48450

Malicious code in casualroadrunnerz3n npm...

RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency

The net/http package dependency used by RoadRunner improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext...

GHSA-G9PC-8G42-G6VQ RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency

The net/http package dependency used by RoadRunner improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext...

Time Warner Cable Urges 320,000 Customers to Change Passwords

Roughly 320,000 Time Warner Cable customers are being told to change their email passwords this week after the company announced Wednesday that hackers may have gained access to them. The move comes after the F.B.I. notified the telecommunications giant that someone may have gained access to TWC...

RoadRunner Cablemodem Remote Root

Hello. This is the introduction to a large-scale RoadRunner Cable-Router exploit on the Ambit U10C019 CableModem. Basically, the default Cable Router that RoadRunner/TimeWarner gives to its customers by default: 1 Allows for remote login with user: admin, password: cableroot. 2 Allows remote acce...