Malicious code in framework-optimize-css-assets-webpack-plugin-start-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b11707fa868987c2b0a57652ef1ff6d6bfc66581bbb843458f682c7605a42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-uninstall-europa-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4244f6505f7c45e72bf30aca99770c0cc5832f3159ed307e19d993b30c5af9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2023-22303: Improper Authentication

TP-Link SG105PE firmware prior to 'TL-SG105PEUN 1.01.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certain conditions, an attacker may impersonate an administrator of the product. As a result, information may be obtained and/or the product's settings may be altere...