Malicious code in start-iota-webpack-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a864f90e149e2b4496c53b9311b410904ffa98c5015ec30a16c6e3787810c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-io-nightwatch-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e2d1c8c06aa9ace0532a0d3a61dbaeb3cd2e038d997fe0f7dc80a93fd3260a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178121

Malicious code in less-pavo-restart-start npm...

Malicious code in solarnebula-nextjs-start-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a158f05aded8cc14a93cdd7ddcd71a02ef799b562af59a0981fea88e286fb34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187217 Malicious code in gravity-start-triton-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05dc11358c2821d460c58ed1e3be419761bd92b3c1d007e566b84d52e38f4132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189659 Malicious code in start-iota-webpack-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a864f90e149e2b4496c53b9311b410904ffa98c5015ec30a16c6e3787810c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189585 Malicious code in solarnebula-nextjs-start-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a158f05aded8cc14a93cdd7ddcd71a02ef799b562af59a0981fea88e286fb34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176217

Malicious code in start-io-nightwatch-install npm...

EUVD-2025-178282

Malicious code in javascript-start-halley-eclipse npm...

EUVD-2025-180421

Malicious code in antares-jasmine-rocket-start npm...

EUVD-2025-177604

Malicious code in nightmare-start-meteor-node-sass npm...

EUVD-2025-177647

Malicious code in neptunology-gravity-start-interferometry npm...

Malicious code in aether-start-lepton-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36aedbc551c0fdb6d6a164bc853c5330db99a2f5ebdc2bd7c415435ac4acf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176290

Malicious code in solarnebula-nextjs-start-request npm...

EUVD-2025-180491

Malicious code in aether-start-lepton-mdx npm...

EUVD-2025-178665

Malicious code in gravity-start-triton-oauth npm...

EUVD-2025-178629

Malicious code in gulp-oberon-husky-start npm...

CVE-2025-60689

An unauthenticated command injection vulnerability exists in the StartEPI function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The vulnerability occurs because user-supplied CGI parameters wlant, wlssid, wlrate, ttcpnum, ttcpip, ttcpsize are concatenated in...

CVE-2025-60689

An unauthenticated command injection vulnerability exists in the StartEPI function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The vulnerability occurs because user-supplied CGI parameters wlant, wlssid, wlrate, ttcpnum, ttcpip, ttcpsize are concatenated in...

CVE-2025-60689

CVE-2025-60689 affects Linksys E1200 v2 routers (firmware E1200_v2.0.11.001_us.tar.gz). The issue is an unauthenticated command-injection in the httpd Start_EPI function: user-supplied CGI parameters (wl_ant, wl_ssid, wl_rate, ttcp_num, ttcp_ip, ttcp_size) are concatenated into system commands an...