Malicious code in changing_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03c64287c4545c406e67013f35aa59a7579ab6d15435325f4ff1513bb2f37d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-70939

Malicious code in deliberategalliformz3n npm...

EUVD-2025-68301

Malicious code in regulatorychimpanzeez3n npm...

EUVD-2025-83753

Malicious code in utomo-tumis15-ruro npm...

MAL-2025-104930 Malicious code in kurniawan-dodol24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51c4b55ed68d125ca223e5c906b30c8339df3398d55499223f3213e3a42e966c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111214 Malicious code in yanti-sasag26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0189a6e7b761830231b9fadd2f667a5859f3ea7e0bc71e2af91338dde86352b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111382 Malicious code in yuni-kripik1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f2b697dadc723fd29a1381cde44090e0ce00731a8b8d87ad69daf2b5841d6a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kue87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f7a7a2015d5e720a64f2cba05497bb8ff926712a71629c606bc183a043609b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-70023

Malicious code in hanafi-semur56-ruro npm...

EUVD-2025-83337

Malicious code in yanti-kripik62-ruro npm...

EUVD-2025-69110

Malicious code in maman-lumpur4-ruro npm...

EUVD-2025-70130

Malicious code in hadi-lapis35-ruro npm...

EUVD-2025-83011

Malicious code in adjacentcobraz3n npm...

EUVD-2025-71026

Malicious code in citra-rujak99-ruro npm...

EUVD-2025-71046

Malicious code in citra-kue55-ruro npm...

MAL-2025-104677 Malicious code in joni-kacang37-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ee5e796c1c1850f60d1578302cf9d699914c38dec1807eac73f24d96c3c02a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104325 Malicious code in interesting_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def8c5200750d4145bb67447129fc36490bb18f560863482658de0fa6615e25a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100496 Malicious code in cindy-ubi79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7d0de945f62db748a9bea39702e7e58b11b933f9577f8691493dd92088b9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-8108

An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the...

Malicious code in troubled_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6211a2c53bdd3635b89c896393f92e29b3c7fd2e6e62757a9c35a8e50c9a8332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...