1955 matches found
MAL-2025-80247 Malicious code in nina-empal23-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e286d632a357f28c821a4ddb871b0256a16e0c9cc66d1ff0ab2dbb84d754d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sensitive-white-xerinae (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ae8ad81460f788e0a350c0f4029dfe3a16ea5b01ffb294d21178786d0942a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-65970 Malicious code in vida-nasipecel89-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb705ca79c8da642cd7c48611839f34810ad7afb324ab7acd81aa6b04cbb9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in citra-taiwan30-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dcb5f6fdd7238ae2976bd6d7ba077acfe59f6ddaa468605ed3f45a48c8b8d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in citra-martabak66-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5de8b091b5b050f1d58a1b5e806c109645430ae787ad9e6670c10116ab6b7f The package citra-martabak66-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
MAL-2025-50926 Malicious code in bambang-tek76-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46bd1991edc2f5ea21fd18d4841c08090ab0ce8f706329626af6e8c7d930c70a The package bambang-tek76-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...
Malicious code in candra-nasi9-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488998cc57b63052b215fd4621aefb8911bd0e5e64513664ed33fe7bded9ad43 The package candra-nasi9-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
CVE-2025-11209
Inappropriate implementation in Omnibox in Google Chrome on Android prior to 141.0.7390.54 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...
WordPress Depicter plugin cross-site request forgery vulnerability
WordPress Depicter plugin is a slider, popup and rotator image creation tool designed for WordPress, offering a no-code interface and rich customization features. The WordPress Depicter plugin suffers from a cross-site request forgery vulnerability, which originates from a web application that do...
CVE-2025-11720
The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This...
KLA89279 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, spoof user interface, cause denial of service, gain privileges, execute arbitrary code. Below is a complete list of...
CVE-2025-2140
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data...
CVE-2025-2140
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data...
Code-Projects Simple Car Rental System 安全漏洞
Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A security vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from a privilege bypass issue that allows a low-privileged user to spoof an elevated privilege sessio...
EUVD-2002-2017
Malware in sbrugna...
EUVD-2014-2398
Malware in sbrugna...
EUVD-2016-7921
Malware in sbrugna...
EUVD-2017-0189
Malware in sbrugna...