68 matches found
CVE-2018-9090
CoreOS Tectonic 1.7.x and 1.8.x before 1.8.7-tectonic.2 deploys the Grafana web application using default credentials admin/admin for the administrator account located at grafana-credentials secret. This occurs because CoreOS does not randomize the administrative password to later be configured b...
EUVD-2025-177891
Malicious code in mesosphere-kinetic-ignite-tectonic npm...
EUVD-2025-180500
Malicious code in adonis-tectonophysics-tectonic-helmet npm...
EUVD-2025-179771
Malicious code in changelog-hugo-fusion-tectonic npm...
EUVD-2025-177186
Malicious code in phylogenetics-fork-tectonic-cosmology npm...
EUVD-2025-179088
Malicious code in equinox-blueshift-exosphere-tectonic npm...
EUVD-2025-177413
Malicious code in orbit-typeorm-nucleosynthesis-tectonic npm...
EUVD-2025-176031
Malicious code in tectonic-pino-pretty-build-elara npm...
EUVD-2025-175600
Malicious code in webdriver-mocha-tectonic-leda-antimatter npm...
EUVD-2025-175517
Malicious code in xanthus-tectonic-levels-xanadu npm...
EUVD-2025-177972
Malicious code in magnetar-paleoecology-tectonic-yaml npm...
MAL-2025-187776 Malicious code in library-capella-tectonic-child-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad6929a0d0d976d5d901ed69745f745aa60c1112cc89324dcf4401cade4b817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176033
Malicious code in tectonic-nightmare-archaeoastronomy-inflation npm...
EUVD-2025-175555
Malicious code in whitedwarf-tectonic-izar-hermes npm...
EUVD-2025-176032
Malicious code in tectonic-pegasus-axios-nashira npm...
EUVD-2025-176030
Malicious code in tectonic-seismology-upgrade-commitizen npm...
EUVD-2025-178395
Malicious code in inquirer-flare-sass-loader-tectonic npm...
EUVD-2025-178106
Malicious code in library-capella-tectonic-child-process npm...
MAL-2025-186794 Malicious code in equinox-blueshift-exosphere-tectonic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb960ed72e6f1d7c175342151d10ecb8869ecbc7a1b0cd3a820b2a7d7918ed31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2018-17038
Malware in sbrugna...