1100 matches found
MAL-2025-54548 Malicious code in riana-gudeg64-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f54a3e0efcbbdbf3f60cf455f7ac57aea53d992c8e427555afa0edbe29a2a2b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in iwan-gandul91-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bcfa284abfe62042fd664ae986d7d22b6f7cd543f462f27a7695bd8f800b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-54727 Malicious code in rina-telurtahu89-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8efbe281949bc8debd9a4e724fba322a120f2d953857e288f19ee0ddebed3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-54820 Malicious code in sari-ronde90-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3557fd2cfa9c7f4f7f9f6bd3f247f35a860b28cd8cbf1f9f8ff8acb218c6db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in maman-tahutek48-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d93d21d24e81f9a063966b058cf121dfe21dfac136ce190396bd46b1b9d98556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-52090 Malicious code in joko-nasiuduk79-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90c6ad03370796acd1d6b616451439bf846e0029c2171d072fa4a1847ae0ffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-52987 Malicious code in joko-bakso76-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c91541b2f8a357ea058760d1fa14a991fdfd2d39ab1d9130b22e65d36fda06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dewanto-kue85-apidev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd2080b897b08e86d378eae69955d09d28f96c1a017d8d632d5f84c322c1607 The package dewanto-kue85-apidev was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...
Malicious code in fauzi-nasi11-apidev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7725b7fb36cc5679a67a6cd09cc4419eeb69a281fa254dfcf1d668f08141a6 The package fauzi-nasi11-apidev was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...
Astra Linux – Vulnerability in open-vm-tools
VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper with local files to trigger insecure file operations within that VM...
CVE-2025-63562
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insufficient server-side authorization. Authenticated attackers can call several endpoints and perform create/update/delete actions on resources owned by arbitrary users by manipulating request parameters e.g.,...
CLSA-2025-1761084810 nodejs: Fix of CVE-2023-38552
CVE-2023-38552: use tamper-proof integrity check function to prevent tampering with Hash class internals in policy mechanism...
Towards a Blockchain-Based CI/CD Framework to Enhance Security in Cloud Environments
Security is becoming a pivotal point in cloud platforms. Several divisions, such as business organisations, health care, government, etc., have experienced cyber-attacks on their infrastructures. This research focuses on security issues within Continuous Integration and Deployment CI/CD pipelines...
EUVD-2025-34118
SAP S/4HANA Manage Processing Rules - For Bank Statements allows an authenticated attacker with basic privileges to delete conditions from any shared rule of any user by tampering the request parameter. Due to missing authorization check, the attacker can delete shared rule conditions that should...
EUVD-2021-12180
Malware in sbrugna...
EUVD-2020-29202
Malware in sbrugna...
EUVD-2019-4338
Malware in sbrugna...
EUVD-2017-8470
Malware in sbrugna...