Siemens Desigo CC family

SUMMARY A Client Code Execution CCE vulnerability has been identified in Desigo CC, potentially allowing malicious actors to execute arbitrary code on client devices through specially crafted graphics documents. This vulnerability leverages user-defined graphics containing embedded scripts that...

Malicious Package

Overview tool-registry-scripts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in dynamic_fly_z3n (npm)

Source: amazon-inspector c5131621ed96dad8cfe9df944285b8efb8d13089282704f7ffd8fe7c4d7fc2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dying_shrimp_z3n (npm)

Source: amazon-inspector c827781b3609436b27d29d306741bd52db2fe59758fef8d512e7585f455f8e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dusty_barnacle_z3n (npm)

Source: amazon-inspector 8cf4b299aa22257d273a0f9e313a475cc20c502c5220db06d52c4477fda3d043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dorado-module-centauri-procyon (npm)

Source: amazon-inspector 9dc48c5da0d6de22d1a878291edfa6b66e1ba73e9a36bab77ba8939963d3e8cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in disabled_bobcat_z3n (npm)

Source: amazon-inspector d197b35fb93942edc69fe7421a2d52cadfda345245a3b7d318a65d7e5c25b481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in disabled_wildcat_z3n (npm)

Source: amazon-inspector f6494ee5ebe01d11dba13fadd4dfdb2f8730798555521cfcf8a2a4ed42888bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dian-tiwul56-miaww (npm)

Source: amazon-inspector 4f70fde307d6a59e524163c7082f083c1daf5014b4e7963bd97181ab0be4fddd The package dian-tiwul56-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm with over 15,000 spam packages in 2024. These package...

Malicious code in dewanto-bakwan80-sukiwir (npm)

Source: amazon-inspector d29a606989f346b4f2d2971e63f9374d2d55e89699b540c1bccb2e3ddb0126f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dangerous_kiwi_z3n (npm)

Source: amazon-inspector 19ece03ce259b89d4f2a35d81ece9b9c09851082d6c5b248f2c9cd67ddf2a835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

BUUCTF-Web-Writeups

BUUCTF-Web-Writeups A collection of CTF Web challenges writ...

CVE-2026-84021: Improper Neutralization of Input During Web Page Generation

The Bold Page Builder WordPress plugin before 5.9.8 does not properly validate a link URL before outputting it in an HTML attribute, relying on a filter that can be evaded, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when a user clicks the...

CVE-2026-77393

Inductive Automation Ignition versions 8.1.53 and earlier ship with a blank default in the Gateway "Create Project Role(s)" setting, allowing any authenticated user who can execute gateway scripts to create projects . Successful exploitation could compromise the integrity and availability of the ...

Cross-site Scripting (XSS)

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the modular pages process. An attacker can execute arbitrary scripts in the context of administrator or visitor...

Malicious code in dajouka-degfta-tac (npm)

Source: amazon-inspector 54cba6fb937de994df16c2b3c8a392ee604a82f5771d3d832019604170c8c997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cors-registry-cross-env-alphard (npm)

Source: amazon-inspector 097b8707ff937202a007e6ec522d6f0159c12a69f763bba77779bf43607923ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

MAL-2026-15866 Malicious code in @bx-ui-framework/authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80fea2ddf5689952ca33aee5f32efb088024bd1a243621b558d3cdc41ed7d57 package.json at line 14 declares a runtime dependency microfrontend whose source is a bare HTTPS URL...

Malicious code in @bx-ui-framework/authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80fea2ddf5689952ca33aee5f32efb088024bd1a243621b558d3cdc41ed7d57 package.json at line 14 declares a runtime dependency microfrontend whose source is a bare HTTPS URL...

Malicious code in @bx-ui-framework/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b8886bf47df30ba72e888647d651e72defd41c1172a4307c438562183d7a32 package.json declares a dependency whose key equals the package's own name @bx-ui-framework/common and whose value is a bare HTTPS URL...