Cisco Catalyst Center Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of user input. An...

EUVD-2025-150364

sudo-rs doesn't record authenticating user properly in timestamp...

CVE-2025-13117 macrozheng mall-swarm/mall cancelOrder improper authorization

A security vulnerability has been detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this vulnerability is the function cancelOrder of the file /order/cancelOrder. The manipulation of the argument orderId leads to improper authorization. The attack can be initiated remotely. The...

CISA Releases 18 Industrial Control Systems Advisories

CISA released 18 Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-317-01 Mitsubishi Electric MELSEC iQ-F Series ICSA-25-317-02 AVEVA Application Server IDE ICSA-25-317-03...

Malicious code in halley-pm2-semantic-ui-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207baa0abd8ece63fe60c3b6ed72245a1fbd0ab7acbb419f0f280f5e15470fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175427

Malicious code in zenobia-colors-neptunology-darkmatter npm...

EUVD-2025-177966

Malicious code in magnetosphere-quito-isostasy-despina npm...

EUVD-2025-176862

Malicious code in quantumfoam-wavefunction-lacerta-singularity npm...

EUVD-2025-178583

Malicious code in hawkingradiation-xenobiology-prettier-stylelint-buffer npm...

EUVD-2025-178888

Malicious code in flare-backend-jsonp-orogeny npm...

EUVD-2025-177071

Malicious code in prettier-plugin-markdown-json-joviology-filament npm...

EUVD-2025-176467

Malicious code in sedimentology-ablation-meteor-xml npm...

EUVD-2025-176583

Malicious code in run-script-sagitta-pulsar-alphard npm...

Malicious code in subscription-interstellarmedium-toml-neuromorphic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94870bef41024d316470dd53ab7a4f20aa757f5e14a2b389f9389b45f02c0f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subduction-pulsar-yaml-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fdcdd77876d0905b0625c6064e91a7bcc7cf4dd76d43162bb3a86d9a6a56da5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parse-array-slow-emulate-notify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79730effee3d6d0c7142b05c594c736477c5c548260feef0b81f2fa621df42c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179101

Malicious code in epigenetics-kinetic-prompts-taphonomy npm...

EUVD-2025-177134

Malicious code in playwright-asthenosphere-norma-cassini npm...

EUVD-2025-177568

Malicious code in node-sass-blitz-paleobotany-decoherence npm...

Malicious code in venus-phoebe-heliophysics-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c557360705a7b782a60c0b57663064bd571c2258f3504b22e00fdd91e865c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...