Malicious code in redundant_emu_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8ca808d27df6c7872e7e5b3394c1a398908c2dff80e1a68791bea4119237e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62725 Malicious code in eko-taiwan42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c579e540751f5af823299582063a92cc6f9b6f9ce169fd784a669cb19057f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-nasi34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cab5176abe28c39559041d4841c00ac4b959475f0dd50f0c4164f998d4075e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65205 Malicious code in rudi-ragi36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ba06fb9548d822f7cacfc96d77677cf63cde640543b4bef0134f05c3c0c01f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Siemens Solid Edge SE2025 信任管理问题漏洞

Siemens Solid Edge SE2025 is a development software from Siemens Germany. A trust management issue vulnerability exists in versions prior to Siemens Solid Edge SE2025 V225.0 Update 11, which stems from not properly validating client certificates and could lead to a man-in-the-middle attack...

WordPress plugin Double the Donation 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

PT-2025-46538

Name of the Vulnerable Software and Affected Versions Solid Edge SE2025 versions prior to V225.0 Update 11 Description The application does not properly validate client certificates when connecting to the License Service endpoint. This could allow a remote attacker to perform man-in-the-middle...

Siemens Solid Edge

SUMMARY Solid Edge is affected by improper certificate validation while connecting to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released a new version for Solid Edge SE2025 and recommends to update to the...

MAL-2025-60465 Malicious code in female_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e2d3cd9b0f61f052bcfdd1a07b2e144592bbd0637c1cef50e5d7c7e4cf53d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57081 Malicious code in joko-toge66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6f692ab89848e4c6b2d83ebba4e73554227555720dd626c22c402d28b91861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available_smelt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba506bffa8ff70adaa370133910d1ac2b122fe84b56c633ff1f7c9e272bf099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54788 Malicious code in sari-gaplek93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba06a2c395e8d180eff7bbd44ae1cbe85d779946fdcaf467a43fde1c31855ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-mieayam27-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de11d6ef0556f0bdf929706266e4aaeab64e10cb3739b73b55720fe49fc58839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53173 Malicious code in kurnia-sambel31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20409b0e70780ee1cc1ac1485fcb92a6f9599c4adc84c2b2d2420e9c03918110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52778 Malicious code in gita-rujak36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84187b3cb2d238a7ac31a27b59bf77cf022a07a7bae56dd8a9a7b18bf8d0528d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46241

Name of the Vulnerable Software and Affected Versions Double the Donation – A workplace giving tool to help your fundraising efforts plugin for WordPress versions prior to 2.0.1 Description The Double the Donation plugin for WordPress is susceptible to Stored Cross-Site Scripting through admin...

IBM Cloud Pak for Business Automation Improper Access Control Vulnerability

IBM Cloud Pak for Business Automation is a suite of modular, integrated software components for any type of hybrid cloud environment, designed to accelerate business growth and improve operational efficiency by automating technologies that enable digital transformation of business processes. An...

Synergistic Development of Cybersecurity and Functional Safety for Smart Electric Vehicles

The introduction of Smart Electric Vehicles SEVs represents an increasingly disruption on automotive area, once integrates advanced computer and communication technologies to highly electrical cars, which come with high performances, environment friendly and user friendly characteristics . But th...

CVE-2025-12905

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 140.0.7339.80 allowed a remote attacker to bypass Mark of the Web via a crafted HTML page. Chromium security severity: Low...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in versions of Google Chrome prior to 140.0.7339.80, which stems from an improper implementation of the download feature and could lead to a bypass of Mark of the Web...