Malicious code in dian-miebogor16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6684f6396772172c03932a0e0643476f279c1c274feba8ef63cc37fb20a5acb2 The package dian-miebogor16-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in eka-mendut85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a943cae932a28996b3da70e94209e9f57f2df47fcc4172864ffce926341e7c The package eka-mendut85-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in cici-miebogor56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8742b9ff34ebe894f83171dfae6ae18d0fa20b0a6db7b0b392115976817b81e3 The package cici-miebogor56-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in dewanto-tahutek76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b84b9f73eb77850341b95925c97ea04821f82502f9872084f0ef3e1b5d0b75c The package dewanto-tahutek76-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in vina-bakwan70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5386d24dd56329990b548ff9622aff81472eb153cbf89f31e0708003cf19bbf9 The package vina-bakwan70-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50913 Malicious code in bambang-papeda9-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ace52aa73c57f03253038f8042bf4eb23112e3a219f24574b720f6ff129765 The package bambang-papeda9-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51166 Malicious code in budi-tek69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09bb84fd2547b9ccf66d67a4368c6de423571365c719a0259f051af4cf3d279b The package budi-tek69-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-50354 Malicious code in erwin-tapai13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73680f388ef27c6e94a014442ede09a45b412b272911325e98fb2f4f7b223452 The package erwin-tapai13-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in andi-takokak49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13a35bcb3f4dc59af64d5b969b0d90fcdd89b90f9197b84562781b11397ef0d6 The package andi-takokak49-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in citra-rangi43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062d42ee4093f76233c1f88662c92ab9086ff4ce8ba4de42b5c43c133ef6a5cf The package citra-rangi43-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-52471 Malicious code in tomi-rangi60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002cced94b8254267863ffa070ac3ebe5bc8edd461f56cab8712605b194f5c13 The package tomi-rangi60-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51628 Malicious code in eka-donat34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e25ae2aa8ae46ca0c034a57beb6a696464516cd86713c468da561dbc2ffedd The package eka-donat34-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50590 Malicious code in umi-getuk88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed6037001657abba9681e30e3d9dc9a18b23c11d92839f97af0d49f7033cabc The package umi-getuk88-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Shai-Hulud npm Worm

Shai-Hulud is a self-replicating worm targeting the npm ecosystem. Once it compromises a developer machine or CI/CD runner, it harvests secrets and uses them to republish itself across multiple npm packages within hours. This advisory holds IoCs and further information...

WinVerifyTrust Signature Validation Vulnerability

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...

CVE-2018-8048

In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment...

CVE-2013-3900

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...

CVE-2013-3900

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...